diff --git a/.claude/settings.local.json b/.claude/settings.local.json index 1712d76faf..2446f7a2ff 100644 --- a/.claude/settings.local.json +++ b/.claude/settings.local.json @@ -14,7 +14,75 @@ "Bash(git add:*)", "Bash(git commit:*)", "Bash(find:*)", - "Bash(ls:*)" + "Bash(ls:*)", + "Bash(npx kill-port:*)", + "Bash(taskkill:*)", + "Bash(cmd /c:*)", + "Bash(chmod:*)", + "Bash(bash:*)", + "Bash(tree:*)", + "Bash(awk:*)", + "Bash(grep:*)", + "Bash(sed:*)", + "Bash(xargs sed:*)", + "Bash(powershell:*)", + "Bash(npm run build:*)", + "Bash(set UV_THREADPOOL_SIZE=16)", + "Bash(npm run clear:*)", + "Bash(cat:*)", + "Bash($ENV:DOCS_PRODUCT=\"endpointprotector\")", + "Bash(DOCS_PRODUCT=\"endpointprotector\" npm run build)", + "Bash(Get-Process node -ErrorAction SilentlyContinue)", + "Bash(Stop-Process -Force)", + "Bash(dir \"C:\\GITLOCAL\\docs\\docs\\endpointpolicymanager\\components\")", + "Bash(xcopy:*)", + "Bash(robocopy:*)", + "Bash(dir \"C:\\GITLOCAL\\docs\\docs\\endpointpolicymanager\\components\\javaenterpriserules\")", + "Bash(dir \"C:\\GITLOCAL\\docs\\docs\\endpointpolicymanager\\components\\javaenterpriserules\\manual\")", + "Bash(dir \"C:\\GITLOCAL\\docs\\docs\\endpointpolicymanager\\components\\applicationsettingsmanager\")", + "Bash(dir:*)", + "Bash(timeout 30 npm start)", + "Bash($ENV:DOCS_PRODUCT=\"endpointpolicymanager\")", + "Bash(timeout:*)", + "Bash(for file in \"gettingstarted/misc/knowledgebase/gettingstarted/prepare.md\" \"licensing/knowledgebase/troubleshooting/enterprisefull.md\" \"components/applicationsettingsmanager/technotes/troubleshooting/mmc.md\" \"licensing/installation/videolearningcenter/videolearningcenter.md\" \"licensing/installation/knowledgebase/updating/ringsupgrade.md\")", + "Bash(do echo \"Processing: $file\")", + "Bash(echo \"Updated: $file\")", + "Bash(done)", + "Bash(for:*)", + "Bash(do echo \"=== $dir ===\")", + "Bash(do echo \"Checking: $file\")", + "Bash(if [ -f \"docs/endpointpolicymanager/$file\" ])", + "Bash(then echo \"✓ EXISTS\")", + "Bash(else echo \"✗ MISSING\")", + "Bash(fi)", + "Bash(do cp \"C:\\GITLOCAL\\docs\\docs\\endpointpolicymanager\\manuals\\gporeductionandtrans\\preferences\\gettingstarted$file\" \"C:\\GITLOCAL\\docs\\docs\\endpointpolicymanager\\components\\preferencesmanager\\manual\\gettingstarted$file\")", + "Bash(rg:*)", + "Bash(do sed -i 's/knowledgebase\\/leastprivilegemanager/components\\/endpointprivilegemanager/g' \"$file\")", + "Bash(sort:*)", + "Bash(do echo \"=== $component ===\")", + "Bash(if [ -f \"$component/knowledgebase/knowledgebase.md\" ])", + "Bash(if [ -f \"$component/technotes/knowledgebase.md\" ])", + "Bash(if [ -f \"$component/videolearningcenter/videolearningcenter.md\" ])", + "Bash(else echo \"✗ videolearningcenter/videolearningcenter.md\")", + "Bash(if [ -f \"$component/videos/videolearningcenter.md\" ])", + "Bash(else echo \"✗ videos/videolearningcenter.md\")", + "Bash(if [ -f \"$component/manual/overview.md\" ])", + "Bash(do if [ -d \"$component\" ])", + "Bash([ \"$component\" != \".\" ])", + "Bash(then if [ -d \"$component/knowledgebase\" ])", + "Bash([ -d \"$component/technotes\" ])", + "Bash([ -d \"$component/videolearningcenter\" ])", + "Bash([ -d \"$component/videos\" ])", + "Bash(then echo \"Component: $component\")", + "Bash(do if [ -d \"$component/manual\" ])", + "Bash(else echo \"✗ $component has no manual/\")", + "Bash(do sed -i 's|/docs/endpointpolicymanager/knowledgebase/knowledgebase\\.md|/docs/endpointpolicymanager/|g' \"docs/endpointpolicymanager/$file\")", + "Bash(do sed -i 's|/docs/endpointpolicymanager/installation/knowledgebase/antivirussystemsoftware/|/docs/endpointpolicymanager/upgrademaintenance/antivirussystemsoftware/|g' \"docs/endpointpolicymanager/$file\")", + "Bash(do sed -i 's|/docs/endpointpolicymanager/gettingstarted/cloud|/docs/endpointpolicymanager/deliverymethods/cloud|g' \"docs/endpointpolicymanager/$file\")", + "Bash(do sed -i 's|/docs/endpointpolicymanager/gettingstarted/grouppolicy|/docs/endpointpolicymanager/deliverymethods/grouppolicy|g' \"docs/endpointpolicymanager/$file\")", + "Bash(do sed -i 's|gettingstarted/cloud|deliverymethods/cloud|g; s|gettingstarted/grouppolicy|deliverymethods/grouppolicy|g; s|gettingstarted/mdm|deliverymethods/mdm|g' \"$file\")", + "Bash(do sed -i 's|/docs/endpointpolicymanager/gettingstarted/mdm|/docs/endpointpolicymanager/deliverymethods/mdm|g' \"docs/endpointpolicymanager/$file\")", + "Bash(do sed -i 's|/docs/endpointpolicymanager/gettingstarted/mdm/|/docs/endpointpolicymanager/deliverymethods/mdm/|g' \"docs/endpointpolicymanager/$file\")" ], "deny": [] } diff --git a/.gitignore b/.gitignore index d67885be6b..4721582f01 100644 --- a/.gitignore +++ b/.gitignore @@ -20,7 +20,8 @@ packages # Claude settings .claude/settings.local.json +.claude/ npm-debug.log* yarn-debug.log* -yarn-error.log* \ No newline at end of file +yarn-error.log* diff --git a/docs/endpointpolicymanager/REORGANIZATION_NOTES.md b/docs/endpointpolicymanager/REORGANIZATION_NOTES.md new file mode 100644 index 0000000000..42e5a7847a --- /dev/null +++ b/docs/endpointpolicymanager/REORGANIZATION_NOTES.md @@ -0,0 +1,169 @@ +# EndpointPolicyManager Documentation Reorganization Notes + +## Project Overview +Reorganizing EndpointPolicyManager (PolicyPak) component documentation from scattered structure across `/knowledgebase/`, `/manuals/`, and `/videolearningcenter/` to clean top-level organization under `/endpointpolicymanager/[component]/`. + +## Target Structure for Each Component +``` +• [Component Name] + ○ Manual + ▪ Getting to know [Component] + ▪ Understanding [Component] Policies + ▪ Configuration + ○ Videos + ▪ Getting Started + ▪ Methods: Cloud, MDM and SCCM + ▪ Tips and Tricks + ▪ [Component-specific categories] + ○ Tech Notes + ▪ Installation and Uninstallation + ▪ Troubleshooting + ▪ Tips and Tricks +``` + +## Completed Components + +### ✅ Browser Router - COMPLETED +**Status:** Fully reorganized and cleaned up + +**Original Locations:** +- Manual: `/manuals/appsbrowsersandjavas/browserrouter/` (16 files + IE subfolder) +- Knowledge Base: `/knowledgebase/browserrouter/knowledgebase/` (installation, troubleshooting, tips & tricks) +- Videos: `/knowledgebase/browserrouter/videolearningcenter/` (getting started, methods, tips & tricks, citrix) + +**New Location:** `/endpointpolicymanager/browserrouter/` + +**Files Reorganized:** 85 total files +- 47 knowledge base files → Tech Notes +- 21 video files → Videos +- 17 manual files → Manual + +**Key Actions Taken:** +1. Created new directory structure with proper categories +2. Copied all files to new locations with logical organization +3. Created category files with simplified labels ("Manual", "Videos", "Tech Notes") +4. Generated comprehensive overview pages for each section +5. **CRITICAL:** Removed old directories to eliminate duplicate URLs +6. **CRITICAL:** Restarted development server to rebuild routing after directory removal + +**Scripts Created:** +- `reorganize_browser_router.sh` - Initial reorganization +- `complete_browser_router.sh` - Updates overview pages +- `cleanup_browser_router.sh` - Removes old directories + +## Components To Be Reorganized + +### ✅ File Associations Manager - COMPLETED +**Status:** Fully reorganized and cleaned up + +**Original Locations:** +- Manual: `/manuals/windows10and11manage/fileassociations/fileassociations/` (3 files) +- Knowledge Base: `/knowledgebase/fileassociationsmanager/knowledgebase/` (tips & troubleshooting) +- Videos: `/knowledgebase/fileassociationsmanager/videolearningcenter/` (getting started, methods, tips) + +**New Location:** `/endpointpolicymanager/fileassociationsmanager/` + +**Files Reorganized:** 31 total files +- Knowledge base and video files → organized structure +- Manual files → proper categorization +- All category files created with simplified labels + +### ✅ Device Manager - COMPLETED +**Status:** Fully reorganized and cleaned up + +**Original Locations:** +- Manual: `/manuals/devicemanagementpak/devicemanager/` (6 files) +- Knowledge Base: `/knowledgebase/devicemanager/knowledgebase/` (minimal content) +- Videos: `/knowledgebase/devicemanager/videolearningcenter/` (getting started, methods) + +**New Location:** `/endpointpolicymanager/devicemanager/` + +**Files Reorganized:** 19 total files +- Manual files organized into getting to know + configuration +- Video files organized with proper categories +- Tech notes structure created + +### ✅ Scripts and Triggers Manager - COMPLETED +**Status:** Fully reorganized and cleaned up + +**Original Locations:** +- Manual: `/manuals/desktopautomationand/scriptstriggers/` (5 files + 2 subfolders) +- Knowledge Base: `/knowledgebase/scriptstriggers/knowledgebase/` (tips & troubleshooting) +- Videos: `/knowledgebase/scriptstriggers/videolearningcenter/` (getting started, methods, tips, triggers examples, with cloud) + +**New Location:** `/endpointpolicymanager/scriptstriggers/` + +**Files Reorganized:** 62 total files +- Complex video structure preserved with 5 categories +- Manual files organized with item level targeting section +- Full tech notes structure implemented + +**Special Features:** Maintains complex video categories including "Triggers Examples" and "With Cloud" + +## Critical Lessons Learned + +### 🚨 IMPORTANT: Complete Process Required +1. **Copy files** to new structure +2. **Create category files** with simplified labels +3. **Generate overview pages** for navigation +4. **Remove old directories** - CRITICAL to avoid duplicate URLs +5. **Restart development server** - CRITICAL to rebuild routing + +### 🚨 Development Server Issues +After removing directories, the development server will have cached references to old paths causing chunk loading errors. **MUST restart server** with: +```bash +npx kill-port 4500 +npm run start +``` + +### 🚨 URL Conflicts +If old directories are not removed, both old and new URLs will work, creating duplicate content and confusion. Always clean up old directories after verification. + +## Scripts Template Pattern + +### 1. Initial Reorganization Script +- Create new directory structure +- Copy all files with logical organization +- Create all category files with simplified labels +- Generate overview pages + +### 2. Completion Script (if needed) +- Update overview pages with detailed descriptions +- Fix any missing cross-references + +### 3. Cleanup Script +- Verify new structure exists +- Remove old directories +- Provide URL change summary + +## Key Actions Taken for All Components +1. **Created comprehensive reorganization script** (`reorganize_three_components.sh`) +2. **Executed full reorganization** of all three components simultaneously +3. **Created cleanup script** (`cleanup_three_components.sh`) to remove old directories +4. **Restarted development server** to rebuild routing after cleanup + +## Scripts Created +- `reorganize_three_components.sh` - Complete reorganization of all three components +- `cleanup_three_components.sh` - Removes all old directories for three components +- `REORGANIZATION_NOTES.md` - This documentation file + +## Final File Counts Summary +- **Browser Router:** 85 files ✅ COMPLETED +- **File Associations Manager:** 31 files ✅ COMPLETED +- **Device Manager:** 19 files ✅ COMPLETED +- **Scripts and Triggers Manager:** 62 files ✅ COMPLETED +- **Total Files Reorganized:** 197 files + +## New Component URLs +All components now available at clean top-level URLs: +- `/endpointpolicymanager/browserrouter/` +- `/endpointpolicymanager/fileassociationsmanager/` +- `/endpointpolicymanager/devicemanager/` +- `/endpointpolicymanager/scriptstriggers/` + +## Project Status: ✅ COMPLETE +**All four target components have been successfully reorganized with clean, consistent structure and simplified navigation labels.** + +--- +*Last Updated: 2024-09-12* +*Status: All components complete - project finished!* \ No newline at end of file diff --git a/docs/endpointpolicymanager/archive/_category_.json b/docs/endpointpolicymanager/archive/_category_.json new file mode 100644 index 0000000000..8d04836a8a --- /dev/null +++ b/docs/endpointpolicymanager/archive/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Archive", + "position": 220, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/archive/acrobatxpro.md b/docs/endpointpolicymanager/archive/acrobatxpro.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/archive/acrobatxpro.md rename to docs/endpointpolicymanager/archive/acrobatxpro.md diff --git a/docs/endpointpolicymanager/knowledgebase/archive/admxfiles.md b/docs/endpointpolicymanager/archive/admxfiles.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/archive/admxfiles.md rename to docs/endpointpolicymanager/archive/admxfiles.md diff --git a/docs/endpointpolicymanager/knowledgebase/archive/applock.md b/docs/endpointpolicymanager/archive/applock.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/archive/applock.md rename to docs/endpointpolicymanager/archive/applock.md diff --git a/docs/endpointpolicymanager/knowledgebase/archive/autoupdater.md b/docs/endpointpolicymanager/archive/autoupdater.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/archive/autoupdater.md rename to docs/endpointpolicymanager/archive/autoupdater.md diff --git a/docs/endpointpolicymanager/knowledgebase/archive/cloud.md b/docs/endpointpolicymanager/archive/cloud.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/archive/cloud.md rename to docs/endpointpolicymanager/archive/cloud.md diff --git a/docs/endpointpolicymanager/knowledgebase/archive/designstudiofirefox.md b/docs/endpointpolicymanager/archive/designstudiofirefox.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/archive/designstudiofirefox.md rename to docs/endpointpolicymanager/archive/designstudiofirefox.md diff --git a/docs/endpointpolicymanager/archive/designstudiojava.md b/docs/endpointpolicymanager/archive/designstudiojava.md new file mode 100644 index 0000000000..cae2087fdb --- /dev/null +++ b/docs/endpointpolicymanager/archive/designstudiojava.md @@ -0,0 +1,10 @@ +--- +title: "Endpoint Policy Manager Using Endpoint Policy Manager DesignStudio to modify the Java Paks for XP" +description: "Endpoint Policy Manager Using Endpoint Policy Manager DesignStudio to modify the Java Paks for XP" +sidebar_position: 175 +hide_title: true +--- + +import DesignStudioJava from '/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/designstudio/designstudiojava.md'; + + \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/archive/differentusers.md b/docs/endpointpolicymanager/archive/differentusers.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/archive/differentusers.md rename to docs/endpointpolicymanager/archive/differentusers.md diff --git a/docs/endpointpolicymanager/knowledgebase/archive/gotomeeting.md b/docs/endpointpolicymanager/archive/gotomeeting.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/archive/gotomeeting.md rename to docs/endpointpolicymanager/archive/gotomeeting.md diff --git a/docs/endpointpolicymanager/knowledgebase/archive/ie10.md b/docs/endpointpolicymanager/archive/ie10.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/archive/ie10.md rename to docs/endpointpolicymanager/archive/ie10.md diff --git a/docs/endpointpolicymanager/knowledgebase/archive/ie9.md b/docs/endpointpolicymanager/archive/ie9.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/archive/ie9.md rename to docs/endpointpolicymanager/archive/ie9.md diff --git a/docs/endpointpolicymanager/knowledgebase/archive/infranview.md b/docs/endpointpolicymanager/archive/infranview.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/archive/infranview.md rename to docs/endpointpolicymanager/archive/infranview.md diff --git a/docs/endpointpolicymanager/knowledgebase/archive/itemleveltartgeting.md b/docs/endpointpolicymanager/archive/itemleveltartgeting.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/archive/itemleveltartgeting.md rename to docs/endpointpolicymanager/archive/itemleveltartgeting.md diff --git a/docs/endpointpolicymanager/knowledgebase/archive/java.md b/docs/endpointpolicymanager/archive/java.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/archive/java.md rename to docs/endpointpolicymanager/archive/java.md diff --git a/docs/endpointpolicymanager/knowledgebase/archive/massdeploy.md b/docs/endpointpolicymanager/archive/massdeploy.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/archive/massdeploy.md rename to docs/endpointpolicymanager/archive/massdeploy.md diff --git a/docs/endpointpolicymanager/knowledgebase/archive/modenuke.md b/docs/endpointpolicymanager/archive/modenuke.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/archive/modenuke.md rename to docs/endpointpolicymanager/archive/modenuke.md diff --git a/docs/endpointpolicymanager/knowledgebase/archive/office2013.md b/docs/endpointpolicymanager/archive/office2013.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/archive/office2013.md rename to docs/endpointpolicymanager/archive/office2013.md diff --git a/docs/endpointpolicymanager/knowledgebase/archive/operanext.md b/docs/endpointpolicymanager/archive/operanext.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/archive/operanext.md rename to docs/endpointpolicymanager/archive/operanext.md diff --git a/docs/endpointpolicymanager/archive/overview.md b/docs/endpointpolicymanager/archive/overview.md new file mode 100644 index 0000000000..51f720ca5e --- /dev/null +++ b/docs/endpointpolicymanager/archive/overview.md @@ -0,0 +1,39 @@ +--- +title: "Archive" +description: "Archive" +sidebar_position: 999 +--- + +# Archive + +See the following Knowledge Base articles and Video topics that have been archived. This is a list +of archived Knowledge Base articles and video topics. + +- [ADM/X Files – why they cannot prevent user shenanigans](/docs/endpointpolicymanager/archive/admxfiles.md) +- [Manage Different Users In The Same OU (And Reduce Number of GPOs) With Endpoint Policy Manager ](/docs/endpointpolicymanager/archive/differentusers.md) +- [Mass Deploy the Endpoint Policy Manager CSE using GPSI](/docs/endpointpolicymanager/archive/massdeploy.md) +- [Upgrading the CSE using GPSI](/docs/endpointpolicymanager/archive/upgrading.md) +- [Endpoint Policy Manager: Use the DesignStudio to manage FireFox's about:config settings](/docs/endpointpolicymanager/archive/designstudiofirefox.md) +- [Deliver Group Policy to Domain Joined and non-Domain Joined machines thru the Cloud](/docs/endpointpolicymanager/archive/cloud.md) +- [Understanding ADM-ADMX files Tattooing (and what to do about it)](/docs/endpointpolicymanager/archive/tattooing.md) +- [Endpoint Policy Manager: Manage InfranView using Group Policy, SCCM or your own management utility](/docs/endpointpolicymanager/archive/infranview.md) +- [Endpoint Policy Manager: Manage Opera Next using Group Policy, SCCM or your own management utility](/docs/endpointpolicymanager/archive/operanext.md) +- [Endpoint Policy Manager: Manage GoToMeeting using Group Policy, SCCM or your own management utility](/docs/endpointpolicymanager/archive/gotomeeting.md) +- [Endpoint Policy Manager Configure PARCC Testing Configuration Stations using Endpoint Policy Manager to prevent pop-ups](/docs/endpointpolicymanager/archive/parcctesting.md) +- [Endpoint Policy Manager: Manage VMware Workstation Hardware and Options](/docs/endpointpolicymanager/archive/vmware.md) +- [Endpoint Policy Manager: Manage and lockdown a specific VMware Workstation's VMX file settings](/docs/endpointpolicymanager/archive/vmwarefilesettings.md) +- [Endpoint Policy Manager: Manage Java 7u45 using Group Policy](/docs/endpointpolicymanager/archive/java.md) +- [Endpoint Policy Manager and VMware Horizon Mirage](/docs/endpointpolicymanager/archive/vmwarehorizonmirage.md) +- [Lockdown Microsoft Office Suite 2013](/docs/endpointpolicymanager/archive/office2013.md) +- [Endpoint Policy ManagerPreferences with Endpoint Policy Manager Exporter](/docs/endpointpolicymanager/archive/preferencesexporter.md) +- [Endpoint Policy Manager Using Endpoint Policy Manager DesignStudio to modify the Java Paks for XP](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/designstudio/designstudiojava.md) +- [Internet Explorer 10 and Internet Explorer Maintenance – the whole story](/docs/endpointpolicymanager/archive/ie10.md) +- [Nuke mode, and why users can avoid your GPprefs settings](/docs/endpointpolicymanager/archive/modenuke.md) +- [Endpoint Policy Manager: Manage Acrobat X Pro Using Group Policy](/docs/endpointpolicymanager/archive/acrobatxpro.md) +- [Endpoint Policy Manager: Manage Internet Explorer (IE9) Using Group Policy](/docs/endpointpolicymanager/archive/ie9.md) +- [Endpoint Policy Manager supplements VMware View](/docs/endpointpolicymanager/archive/vmwaresupplements.md) +- [Endpoint Policy Manager: Manage Xenapp applications using Group Policy](/docs/endpointpolicymanager/archive/xenapp.md) +- [Endpoint Policy Manager 3.5 Applock Update Behavior Change](/docs/endpointpolicymanager/archive/applock.md) +- [Endpoint Policy Manager and Symantec Workspace Streaming and Virtualization](/docs/endpointpolicymanager/archive/symantecworkspace.md) +- [The CSE auto-updater feature appears to not be working. What can I do?](/docs/endpointpolicymanager/archive/autoupdater.md) +- [Group Policy Preferences: Item Level Targeting](/docs/endpointpolicymanager/archive/itemleveltartgeting.md) diff --git a/docs/endpointpolicymanager/knowledgebase/archive/parcctesting.md b/docs/endpointpolicymanager/archive/parcctesting.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/archive/parcctesting.md rename to docs/endpointpolicymanager/archive/parcctesting.md diff --git a/docs/endpointpolicymanager/knowledgebase/archive/preferencesexporter.md b/docs/endpointpolicymanager/archive/preferencesexporter.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/archive/preferencesexporter.md rename to docs/endpointpolicymanager/archive/preferencesexporter.md diff --git a/docs/endpointpolicymanager/knowledgebase/archive/symantecworkspace.md b/docs/endpointpolicymanager/archive/symantecworkspace.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/archive/symantecworkspace.md rename to docs/endpointpolicymanager/archive/symantecworkspace.md diff --git a/docs/endpointpolicymanager/knowledgebase/archive/tattooing.md b/docs/endpointpolicymanager/archive/tattooing.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/archive/tattooing.md rename to docs/endpointpolicymanager/archive/tattooing.md diff --git a/docs/endpointpolicymanager/knowledgebase/archive/upgrading.md b/docs/endpointpolicymanager/archive/upgrading.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/archive/upgrading.md rename to docs/endpointpolicymanager/archive/upgrading.md diff --git a/docs/endpointpolicymanager/knowledgebase/archive/vmware.md b/docs/endpointpolicymanager/archive/vmware.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/archive/vmware.md rename to docs/endpointpolicymanager/archive/vmware.md diff --git a/docs/endpointpolicymanager/knowledgebase/archive/vmwarefilesettings.md b/docs/endpointpolicymanager/archive/vmwarefilesettings.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/archive/vmwarefilesettings.md rename to docs/endpointpolicymanager/archive/vmwarefilesettings.md diff --git a/docs/endpointpolicymanager/knowledgebase/archive/vmwarehorizonmirage.md b/docs/endpointpolicymanager/archive/vmwarehorizonmirage.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/archive/vmwarehorizonmirage.md rename to docs/endpointpolicymanager/archive/vmwarehorizonmirage.md diff --git a/docs/endpointpolicymanager/knowledgebase/archive/vmwaresupplements.md b/docs/endpointpolicymanager/archive/vmwaresupplements.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/archive/vmwaresupplements.md rename to docs/endpointpolicymanager/archive/vmwaresupplements.md diff --git a/docs/endpointpolicymanager/knowledgebase/archive/xenapp.md b/docs/endpointpolicymanager/archive/xenapp.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/archive/xenapp.md rename to docs/endpointpolicymanager/archive/xenapp.md diff --git a/docs/endpointpolicymanager/components/_category_.json b/docs/endpointpolicymanager/components/_category_.json new file mode 100644 index 0000000000..1de6c0c8b1 --- /dev/null +++ b/docs/endpointpolicymanager/components/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Components", + "position": 20, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/admintemplatesmanager/_category_.json b/docs/endpointpolicymanager/components/admintemplatesmanager/_category_.json new file mode 100644 index 0000000000..ef4813a2ed --- /dev/null +++ b/docs/endpointpolicymanager/components/admintemplatesmanager/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Administrative Templates Manager", + "position": 1, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/_category_.json b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/_category_.json new file mode 100644 index 0000000000..d92c78eb54 --- /dev/null +++ b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Knowledge Base", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "knowledgebase" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/admintemplatestips/_category_.json b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/admintemplatestips/_category_.json new file mode 100644 index 0000000000..8e4e1c948b --- /dev/null +++ b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/admintemplatestips/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Admin Templates Manager Tips and Tricks", + "position": 15, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/admintemplatestips/disableofficeelements.md b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/admintemplatestips/disableofficeelements.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/admintemplatestips/disableofficeelements.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/admintemplatestips/disableofficeelements.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/admintemplatestips/settings.md b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/admintemplatestips/settings.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/admintemplatestips/settings.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/admintemplatestips/settings.md diff --git a/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/admintemplatestroubleshooting/_category_.json b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/admintemplatestroubleshooting/_category_.json new file mode 100644 index 0000000000..9399cd47ca --- /dev/null +++ b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/admintemplatestroubleshooting/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Admin Templates Manager Troubleshooting", + "position": 20, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/admintemplatestroubleshooting/missingcollections.md b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/admintemplatestroubleshooting/missingcollections.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/admintemplatestroubleshooting/missingcollections.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/admintemplatestroubleshooting/missingcollections.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/admintemplatestroubleshooting/namespacealreadydefined.md b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/admintemplatestroubleshooting/namespacealreadydefined.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/admintemplatestroubleshooting/namespacealreadydefined.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/admintemplatestroubleshooting/namespacealreadydefined.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/admintemplatestroubleshooting/policyduplicates.md b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/admintemplatestroubleshooting/policyduplicates.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/admintemplatestroubleshooting/policyduplicates.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/admintemplatestroubleshooting/policyduplicates.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/admintemplatestroubleshooting/settingsreport.md b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/admintemplatestroubleshooting/settingsreport.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/admintemplatestroubleshooting/settingsreport.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/admintemplatestroubleshooting/settingsreport.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/admintemplatestroubleshooting/versions.md b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/admintemplatestroubleshooting/versions.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/admintemplatestroubleshooting/versions.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/admintemplatestroubleshooting/versions.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/admintemplatestroubleshooting/windowsprintspooler.md b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/admintemplatestroubleshooting/windowsprintspooler.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/admintemplatestroubleshooting/windowsprintspooler.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/admintemplatestroubleshooting/windowsprintspooler.md diff --git a/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicypreferences/_category_.json b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicypreferences/_category_.json new file mode 100644 index 0000000000..b07da35aeb --- /dev/null +++ b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicypreferences/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Exporting Group Policy Preferences Using Endpoint Policy Preferences Manager", + "position": 40, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicypreferences/componentlicense.md b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicypreferences/componentlicense.md similarity index 95% rename from docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicypreferences/componentlicense.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicypreferences/componentlicense.md index 4d3d41cbfd..54f5392a7c 100644 --- a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicypreferences/componentlicense.md +++ b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicypreferences/componentlicense.md @@ -18,7 +18,7 @@ Here are the scenarios for which you should request a PPPrefs license: - You want to use Endpoint Policy Manager over MDM. (This is automatically included when we issue an MDM license) - You want to deliver user-side-only Microsoft's GPPreferences items to computers, that is, - [Deploying Endpoint Policy Manager directives without Group Policy (Endpoint Policy Manager Exporter Utility)](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/methods/exporterutility.md) + [Deploying Endpoint Policy Manager directives without Group Policy (Endpoint Policy Manager Exporter Utility)](/docs/endpointpolicymanager/gettingstarted/misc/videos/methods/exporterutility.md) - You want to deliver GPPrefs items using SCCM or some other non-GP method. In those cases, or if you think you have another reason why you need it, open a support ticket at diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicypreferences/domainjoined.md b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicypreferences/domainjoined.md similarity index 90% rename from docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicypreferences/domainjoined.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicypreferences/domainjoined.md index e2f7d10c95..681a08aadd 100644 --- a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicypreferences/domainjoined.md +++ b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicypreferences/domainjoined.md @@ -22,4 +22,4 @@ licensed. To that end, here is the documentation to un-license a single component, like Endpoint Policy Manager Preferences: If you're an on-Prem cloud or MDM customer. -[What if I want to unlicense specific components via ADMX or Endpoint Policy Manager Cloud?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/componentscloud.md) +[What if I want to unlicense specific components via ADMX or Endpoint Policy Manager Cloud?](/docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/componentscloud.md) diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicypreferences/drivemappings.md b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicypreferences/drivemappings.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicypreferences/drivemappings.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicypreferences/drivemappings.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicypreferences/passwords.md b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicypreferences/passwords.md similarity index 95% rename from docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicypreferences/passwords.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicypreferences/passwords.md index e3d1d3e241..da3a1faf19 100644 --- a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicypreferences/passwords.md +++ b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicypreferences/passwords.md @@ -74,4 +74,4 @@ Cloud. In domain-joined scenarios that component is automatically disabled until See -[Why is Endpoint Policy Manager Preferences (original version) "forced disabled" by default?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/forceddisabled.md) +[Why is Endpoint Policy Manager Preferences (original version) "forced disabled" by default?](/docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/forceddisabled.md) diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicypreferences/printerdeploy.md b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicypreferences/printerdeploy.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicypreferences/printerdeploy.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicypreferences/printerdeploy.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicypreferences/settings.md b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicypreferences/settings.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicypreferences/settings.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicypreferences/settings.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicypreferences/startservice.md b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicypreferences/startservice.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicypreferences/startservice.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicypreferences/startservice.md diff --git a/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicysecurity/_category_.json b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicysecurity/_category_.json new file mode 100644 index 0000000000..b533449c9d --- /dev/null +++ b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicysecurity/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Exporting Group Policy Security Settings Using Endpoint Policy Manager Security Settings Manager", + "position": 50, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicysecurity/delivercertificates.md b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicysecurity/delivercertificates.md similarity index 92% rename from docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicysecurity/delivercertificates.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicysecurity/delivercertificates.md index 69ddbac703..3983fba45b 100644 --- a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicysecurity/delivercertificates.md +++ b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicysecurity/delivercertificates.md @@ -14,7 +14,7 @@ example, by following thse steps: ![663_1_q10-img-1](/images/endpointpolicymanager/cloud/security/580_1_q10-img-1.webp) **Step 2 –** Export it using PP Settings Manager to an XML. See the -[Endpoint Policy ManagerCloud: How to deploy Microsoft Group Policy Settings using Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/grouppolicysettings.md) topic +[Endpoint Policy ManagerCloud: How to deploy Microsoft Group Policy Settings using Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/grouppolicysettings.md) topic for additional information. **Step 3 –** Uplaod it to Endpoint Policy Manager Cloud. This would make the specified cert Trusted diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicysecurity/onpremisecloud.md b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicysecurity/onpremisecloud.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicysecurity/onpremisecloud.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicysecurity/onpremisecloud.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicysecurity/securitysettings.md b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicysecurity/securitysettings.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicysecurity/securitysettings.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicysecurity/securitysettings.md diff --git a/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/gpoexportmanager/_category_.json b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/gpoexportmanager/_category_.json new file mode 100644 index 0000000000..e5ba55b0cf --- /dev/null +++ b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/gpoexportmanager/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "GPO Export Manager Getting Started", + "position": 10, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/gpoexportmanager/securitysettings.md b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/gpoexportmanager/securitysettings.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/gpoexportmanager/securitysettings.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/gpoexportmanager/securitysettings.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/gpoexportmanager/usercontext.md b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/gpoexportmanager/usercontext.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/gpoexportmanager/usercontext.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/gpoexportmanager/usercontext.md diff --git a/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/knowledgebase.md b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/knowledgebase.md new file mode 100644 index 0000000000..a95d171960 --- /dev/null +++ b/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/knowledgebase.md @@ -0,0 +1,45 @@ +--- +title: "Knowledge Base" +description: "Knowledge Base" +sidebar_position: 10 +--- + +# Knowledge Base + +See the following Knowledge Base articles for GPO Export Merge, Admin Templates, and Preferences +2.0. + +## GPO Export Manager: Getting Started + +- [Which security settings can be exported by GPO Export Manager?](/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/gpoexportmanager/securitysettings.md) +- [Why must some GPPreferences items be run in User Context?](/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/gpoexportmanager/usercontext.md) + +## Admin Templates Manager: Tips and Tricks + +- [Which settings can be managed with the Admin Templates Manager component?](/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/admintemplatestips/settings.md) +- [How do I disable elements in Office (Outlook, etc.) using Endpoint Policy Manager and ADMX files?](/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/admintemplatestips/disableofficeelements.md) + +## Admin Templates Manager: Troubleshooting + +- [What Admin Console MSI and CSE versions are supported for Endpoint Policy Manager Admin Templates Manager ?](/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/admintemplatestroubleshooting/versions.md) +- [I created a Collection and/or items, but I don't see them in the Group Policy settings report. Why and how can I fix it?](/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/admintemplatestroubleshooting/settingsreport.md) +- [I've created a collection in the Administrative Templates Manager and I've added policies to that collection. However, they are not showing up in the main window.](/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/admintemplatestroubleshooting/missingcollections.md) +- [I get a "Policy Duplicates" error when adding new policies using Endpoint Policy Manager Admin Templates Manager. What should I do?](/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/admintemplatestroubleshooting/policyduplicates.md) +- [I get a "Namespace already defined" error when making new Endpoint Policy Manager Admin Templates Manager policies. What is this?](/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/admintemplatestroubleshooting/namespacealreadydefined.md) +- [How to Mitigate Windows Print Spooler Remote Code Execution Vulnerability (CVE-2021-34527)](/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/admintemplatestroubleshooting/windowsprintspooler.md) + +## Exporting Group Policy Preferences / Using Endpoint Policy Preferences Manager + +- [Where is my Endpoint Policy Manager Preferences Component license and how do I request one?](/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicypreferences/componentlicense.md) +- [Which settings can be managed with the Preferences Manager component?](/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicypreferences/settings.md) +- [How To deploy a TCP/IP Printer using Group Policy Preferences in Endpoint Policy Manager Cloud ](/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicypreferences/printerdeploy.md) +- [Why do I see slowdowns on my machines when Endpoint Policy Manager Preferences is licensed and computers domain joined? Can this be worked around?](/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicypreferences/domainjoined.md) +- [How to deliver network drive mappings using Group Policy Preferences on the computer side](/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicypreferences/drivemappings.md) +- [How to enable and start a service using Group Policy Preferences](/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicypreferences/startservice.md) +- [How do I use passwords with Group Policy Preferences items within Endpoint Policy Manager Cloud?](/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicypreferences/passwords.md) + +## Exporting Group Policy Security Settings / Using Endpoint Policy Manager Security Settings Manager + +- [Can I use Endpoint Policy Manager Cloud to deliver certificates ?](/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicysecurity/delivercertificates.md) +- [Why Won't my Windows Security Settings Export using GPO Export Manager](/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicysecurity/securitysettings.md) +- [Why do I sometimes see Endpoint Policy Manager Cloud security settings and sometimes see on-prem GPO security settings?](/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicysecurity/onpremisecloud.md) diff --git a/docs/endpointpolicymanager/components/admintemplatesmanager/manual/_category_.json b/docs/endpointpolicymanager/components/admintemplatesmanager/manual/_category_.json new file mode 100644 index 0000000000..20ca7992c8 --- /dev/null +++ b/docs/endpointpolicymanager/components/admintemplatesmanager/manual/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Manual", + "position": 1, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/gporeductionandtrans/adminstrativetemplat/comments.md b/docs/endpointpolicymanager/components/admintemplatesmanager/manual/comments.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gporeductionandtrans/adminstrativetemplat/comments.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/manual/comments.md diff --git a/docs/endpointpolicymanager/manuals/gporeductionandtrans/adminstrativetemplat/existinggpos.md b/docs/endpointpolicymanager/components/admintemplatesmanager/manual/existinggpos.md similarity index 92% rename from docs/endpointpolicymanager/manuals/gporeductionandtrans/adminstrativetemplat/existinggpos.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/manual/existinggpos.md index 755eafe69e..cfa33a981f 100644 --- a/docs/endpointpolicymanager/manuals/gporeductionandtrans/adminstrativetemplat/existinggpos.md +++ b/docs/endpointpolicymanager/components/admintemplatesmanager/manual/existinggpos.md @@ -15,7 +15,7 @@ settings (known as REG.POL settings), and then specify a target GPO, to create a :::note See the -[Reduce GPOs (and/or export them for use with Endpoint Policy Manager Cloud or with MDM)](/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/tipsandtricks/exportgpos.md) +[Reduce GPOs (and/or export them for use with Endpoint Policy Manager Cloud or with MDM)](/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/tipsandtricks/exportgpos.md) topic for more information. ::: diff --git a/docs/endpointpolicymanager/components/admintemplatesmanager/manual/export.md b/docs/endpointpolicymanager/components/admintemplatesmanager/manual/export.md new file mode 100644 index 0000000000..86477bab13 --- /dev/null +++ b/docs/endpointpolicymanager/components/admintemplatesmanager/manual/export.md @@ -0,0 +1,22 @@ +--- +title: "Exporting Policies and Collections" +description: "Exporting Policies and Collections" +sidebar_position: 50 +--- + +# Exporting Policies and Collections + +The [Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/uemtools.md) topic explains how to +use the Endpoint Policy Manager Exporter to wrap up any Endpoint Policy Manager directives and +deliver them using Microsoft Endpoint Manager (SCCM and Intune), KACE, your own MDM service, or +Endpoint Policy Manager Cloud. To export a policy for later use using Endpoint Policy Manager +Exporter or Endpoint Policy Manager Cloud, right-click the collection or the policy and select +**Export to XML**. This allows you to save an XML file for later use. + +:::note +For a video of Endpoint Policy Manager Admin Templates Manager delivering settings using +Endpoint Policy Manager Exporter and Microsoft Endpoint Manager (SCCM and Intune), see the +[Endpoint Policy Manager Cloud: Deploy Group Policy Admin template settings over the internet](/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/admintemplatesmethods/deployinternet.md) +topic for additional information. + +::: diff --git a/docs/endpointpolicymanager/components/admintemplatesmanager/manual/gettoknow/_category_.json b/docs/endpointpolicymanager/components/admintemplatesmanager/manual/gettoknow/_category_.json new file mode 100644 index 0000000000..4bfbb9aed7 --- /dev/null +++ b/docs/endpointpolicymanager/components/admintemplatesmanager/manual/gettoknow/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Getting to Know Administrative Templates Manager", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/gporeductionandtrans/adminstrativetemplat/gettoknow/collection.md b/docs/endpointpolicymanager/components/admintemplatesmanager/manual/gettoknow/collection.md similarity index 95% rename from docs/endpointpolicymanager/manuals/gporeductionandtrans/adminstrativetemplat/gettoknow/collection.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/manual/gettoknow/collection.md index 2e77753496..fb18aca754 100644 --- a/docs/endpointpolicymanager/manuals/gporeductionandtrans/adminstrativetemplat/gettoknow/collection.md +++ b/docs/endpointpolicymanager/components/admintemplatesmanager/manual/gettoknow/collection.md @@ -39,5 +39,5 @@ There are settings in the collection that affect only the specified users. Next, we'll ensure that only the East Sales Users get these policy settings while using Item-Level Targeting. See the -[Using Item-Level Targeting with Collections and Policies](/docs/endpointpolicymanager/manuals/gporeductionandtrans/adminstrativetemplat/itemleveltargeting.md) topic for +[Using Item-Level Targeting with Collections and Policies](/docs/endpointpolicymanager/components/admintemplatesmanager/manual/itemleveltargeting.md) topic for additional information on the next steps. diff --git a/docs/endpointpolicymanager/manuals/gporeductionandtrans/adminstrativetemplat/gettoknow/computerside.md b/docs/endpointpolicymanager/components/admintemplatesmanager/manual/gettoknow/computerside.md similarity index 89% rename from docs/endpointpolicymanager/manuals/gporeductionandtrans/adminstrativetemplat/gettoknow/computerside.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/manual/gettoknow/computerside.md index cb949e8212..4a8124d551 100644 --- a/docs/endpointpolicymanager/manuals/gporeductionandtrans/adminstrativetemplat/gettoknow/computerside.md +++ b/docs/endpointpolicymanager/components/admintemplatesmanager/manual/gettoknow/computerside.md @@ -17,7 +17,7 @@ Manager you can deliver user-side settings to any computer that has this GPO. :::note For more information on the Endpoint Policy Manager Admin Templates Manager delivering user-side settings to computers, see the -[Endpoint Policy Manager Admin Templates Manager: Switched Policies (without Loopback)](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/admintemplatesmanager/switchedpolicies.md) +[Endpoint Policy Manager Admin Templates Manager: Switched Policies (without Loopback)](/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/admintemplatesmanager/switchedpolicies.md) topic for additional information. ::: diff --git a/docs/endpointpolicymanager/manuals/gporeductionandtrans/adminstrativetemplat/gettoknow/overview.md b/docs/endpointpolicymanager/components/admintemplatesmanager/manual/gettoknow/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gporeductionandtrans/adminstrativetemplat/gettoknow/overview.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/manual/gettoknow/overview.md diff --git a/docs/endpointpolicymanager/manuals/gporeductionandtrans/adminstrativetemplat/gettoknow/userside.md b/docs/endpointpolicymanager/components/admintemplatesmanager/manual/gettoknow/userside.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gporeductionandtrans/adminstrativetemplat/gettoknow/userside.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/manual/gettoknow/userside.md diff --git a/docs/endpointpolicymanager/manuals/gporeductionandtrans/adminstrativetemplat/itemleveltargeting.md b/docs/endpointpolicymanager/components/admintemplatesmanager/manual/itemleveltargeting.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gporeductionandtrans/adminstrativetemplat/itemleveltargeting.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/manual/itemleveltargeting.md diff --git a/docs/endpointpolicymanager/components/admintemplatesmanager/manual/overview.md b/docs/endpointpolicymanager/components/admintemplatesmanager/manual/overview.md new file mode 100644 index 0000000000..1a0d3135a2 --- /dev/null +++ b/docs/endpointpolicymanager/components/admintemplatesmanager/manual/overview.md @@ -0,0 +1,93 @@ +--- +title: "Administrative Templates Manager" +description: "Administrative Templates Manager" +sidebar_position: 10 +--- + +# Administrative Templates Manager + +:::note +Before reading this section, please see the +[Installation Quick Start](/docs/endpointpolicymanager/gettingstarted/overviewinstall/overviewinstall.md) topic  for more +information on the following: +::: + + +- Install the Admin MSI on your GPMC machine +- Install the CSE on a test Windows machine +- Set up a computer in Trial mode or Licensed mode +- Set up a common OU structure + +Optionally, if you don't want to use Group Policy, see the +[Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/uemtools.md) topic for more +information. + +Endpoint Policy Manager Admin Templates Manager enables administrators to harness the existing power +of Microsoft's 3000+ Admin Template settings and a lot more. + +:::note +See the +[Endpoint Policy Manager Admin Templates: Collections and Item Level Targeting](/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/admintemplatesmanager/collections.md) +topic for more in formation on Endpoint Policy Manager Admin Templates Manager. +::: + + +![about_policypak_admin_templates](/images/endpointpolicymanager/adminstrativetemplates/about_endpointpolicymanager_admin_templates.webp) + +Here we can see some of Microsoft's Admin Template settings. + +![about_policypak_admin_templates_1](/images/endpointpolicymanager/adminstrativetemplates/about_endpointpolicymanager_admin_templates_1.webp) + +Endpoint Policy Manager Admin Templates Manager is a node you see within every Group Policy Object +(GPO) you create. + +Endpoint Policy Manager Admin Templates Manager enables you to perform the following functions: + +- Assemble settings (policies) into collections +- Set Item-Level Targeting on policies and collections +- Deliver user-side policies to computers (without Group Policy Loopback mode) +- Use either Local Storage or Central Storage when choosing definitions +- Search for policies that match certain words in their titles or help text +- Export policies or collections as XML files (available with Endpoint Policy Manager Exporter and + Endpoint Policy Manager Cloud). See the + [Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/uemtools.md) topic for more + information on using Endpoint Policy Manager with MDM and UEM Tools. + +The basic way to use Endpoint Policy Manager Admin Templates Manager is as follows: + +- Create a Microsoft GPO using Endpoint Policy Manager Admin Templates Manager. If you use Group + Policy as the delivery mechanism, it is deployed to client machines. +- If you do not use Group Policy, deploy the GPO using one of these other ways: + + - Microsoft Endpoint Manager (SCCM and Intune) + - Your own systems-management software + - An MDM service + - Endpoint Policy Manager Cloud service + +- The client machine embraces the directives and performs the work + +Endpoint Policy Manager Admin Templates Manager lets admins use Group Policy to deliver settings and +also lets you use a mechanism other than Group Policy to get policies delivered. + +:::note +Additionally, using the Endpoint Policy Manager Cloud service, can even deliver Group +Policy settings to non-domain-joined machines over the Internet. +::: + + +## Components + +Endpoint Policy Manager Admin Templates Manager has the following components: + +- A management station — Start out by creating a standard GPO (which will be edited) and then use + the Endpoint Policy Manager Admin Templates Manager node. +- The Endpoint Policy Manager client-side extension (CSE) — This runs on the client (target) + machine. It is the same CSE for all Endpoint Policy Manager products. There isn't anything + separate to install, and the Endpoint Policy Manager CSE must be present in order to accept + Endpoint Policy Manager Admin Templates Manager directives. +- Endpoints — Must be licensed for Endpoint Policy Manager Admin Templates Manager using one of the + licensing methods +- Endpoint Policy Manager Exporter (optional) — A free utility that lets you take Endpoint Policy + Manager Admin Templates Manager and our other products XML files and wrap them into a portable MSI + file for deployment using Microsoft Endpoint Manager (SCCM and Intune) or your own + systems-management software. diff --git a/docs/endpointpolicymanager/manuals/gporeductionandtrans/adminstrativetemplat/priority.md b/docs/endpointpolicymanager/components/admintemplatesmanager/manual/priority.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gporeductionandtrans/adminstrativetemplat/priority.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/manual/priority.md diff --git a/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/_category_.json b/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/_category_.json new file mode 100644 index 0000000000..cb657b91c6 --- /dev/null +++ b/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Video Learning Center", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "videolearningcenter" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/admintemplatesmanager/_category_.json b/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/admintemplatesmanager/_category_.json new file mode 100644 index 0000000000..744825ce5e --- /dev/null +++ b/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/admintemplatesmanager/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Admin Templates Manager Getting Started", + "position": 20, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/admintemplatesmanager/collections.md b/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/admintemplatesmanager/collections.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/admintemplatesmanager/collections.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/admintemplatesmanager/collections.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/admintemplatesmanager/switchedpolicies.md b/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/admintemplatesmanager/switchedpolicies.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/admintemplatesmanager/switchedpolicies.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/admintemplatesmanager/switchedpolicies.md diff --git a/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/admintemplatesmethods/_category_.json b/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/admintemplatesmethods/_category_.json new file mode 100644 index 0000000000..edebcbbf07 --- /dev/null +++ b/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/admintemplatesmethods/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Admin Templates Methods Cloud MDM SCCM Etc", + "position": 30, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/admintemplatesmethods/deployinternet.md b/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/admintemplatesmethods/deployinternet.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/admintemplatesmethods/deployinternet.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/admintemplatesmethods/deployinternet.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/admintemplatesmethods/reducegpos.md b/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/admintemplatesmethods/reducegpos.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/admintemplatesmethods/reducegpos.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/admintemplatesmethods/reducegpos.md diff --git a/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/admintemplatestips/_category_.json b/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/admintemplatestips/_category_.json new file mode 100644 index 0000000000..d2c6acc00e --- /dev/null +++ b/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/admintemplatestips/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Admin Templates Tips And Tricks", + "position": 40, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/admintemplatestips/screensavers.md b/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/admintemplatestips/screensavers.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/admintemplatestips/screensavers.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/admintemplatestips/screensavers.md diff --git a/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/exportinggrouppolicy/_category_.json b/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/exportinggrouppolicy/_category_.json new file mode 100644 index 0000000000..b0521487df --- /dev/null +++ b/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/exportinggrouppolicy/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Exporting Group Policy Preferences Using Endpoint Policy Preferences Manager", + "position": 60, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/exportinggrouppolicy/cloudlocaluser.md b/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/exportinggrouppolicy/cloudlocaluser.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/exportinggrouppolicy/cloudlocaluser.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/exportinggrouppolicy/cloudlocaluser.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/exportinggrouppolicy/delivergpprefs.md b/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/exportinggrouppolicy/delivergpprefs.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/exportinggrouppolicy/delivergpprefs.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/exportinggrouppolicy/delivergpprefs.md diff --git a/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/exportingtocloud/_category_.json b/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/exportingtocloud/_category_.json new file mode 100644 index 0000000000..b017b7de8c --- /dev/null +++ b/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/exportingtocloud/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Exporting To Cloud MDM And SCCM Getting Started", + "position": 10, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/exportingtocloud/cloudimport.md b/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/exportingtocloud/cloudimport.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/exportingtocloud/cloudimport.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/exportingtocloud/cloudimport.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/exportingtocloud/mdm.md b/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/exportingtocloud/mdm.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/exportingtocloud/mdm.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/exportingtocloud/mdm.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/exportingtocloud/mergetool.md b/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/exportingtocloud/mergetool.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/exportingtocloud/mergetool.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/exportingtocloud/mergetool.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/exportingtocloud/realgposettings.md b/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/exportingtocloud/realgposettings.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/exportingtocloud/realgposettings.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/exportingtocloud/realgposettings.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/exportingtocloud/sccm.md b/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/exportingtocloud/sccm.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/exportingtocloud/sccm.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/exportingtocloud/sccm.md diff --git a/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/gettingstarted/_category_.json b/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/gettingstarted/_category_.json new file mode 100644 index 0000000000..58c06c0976 --- /dev/null +++ b/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/gettingstarted/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Getting Started Preferences 2.0", + "position": 50, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/gettingstarted/consolidateprinter.md b/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/gettingstarted/consolidateprinter.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/gettingstarted/consolidateprinter.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/gettingstarted/consolidateprinter.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/gettingstarted/consolidateregistry.md b/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/gettingstarted/consolidateregistry.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/gettingstarted/consolidateregistry.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/gettingstarted/consolidateregistry.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/gettingstarted/drivemaps.md b/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/gettingstarted/drivemaps.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/gettingstarted/drivemaps.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/gettingstarted/drivemaps.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/gettingstarted/shortcuts.md b/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/gettingstarted/shortcuts.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/gettingstarted/shortcuts.md rename to docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/gettingstarted/shortcuts.md diff --git a/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/videolearningcenter.md b/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/videolearningcenter.md new file mode 100644 index 0000000000..578719c10c --- /dev/null +++ b/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/videolearningcenter.md @@ -0,0 +1,43 @@ +--- +title: "Video Learning Center" +description: "Video Learning Center" +sidebar_position: 20 +--- + +# Video Learning Center + +See the following Video topics for GPO Export Merge, Admin Templates, and Preferences 2.0. + +## Exporting to Cloud, MDM, and SCCM: Getting Started + +- [Export Real GPO settings for use with PP Cloud or any MDM Service.](/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/exportingtocloud/realgposettings.md) +- [Use your GPOs with Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/exportingtocloud/cloudimport.md) +- [Endpoint Policy Export Manager with MDM (like Intune)](/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/exportingtocloud/mdm.md) +- [Endpoint Policy Manager Exporter and SCCM: Deploy real GPOs via SCCM](/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/exportingtocloud/sccm.md) +- [GPO MERGE TOOL REVERSE](/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/exportingtocloud/mergetool.md) + +## Admin Templates Manager: Getting Started + +- [Endpoint Policy Manager Admin Templates: Collections and Item Level Targeting](/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/admintemplatesmanager/collections.md) +- [Endpoint Policy Manager Admin Templates Manager: Switched Policies (without Loopback)](/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/admintemplatesmanager/switchedpolicies.md) + +## Admin Templates Methods: Cloud, MDM, SCCM, etc. + +- [Reduce GPOs (and/or export them for use with Endpoint Policy Manager Cloud or with MDM)](/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/tipsandtricks/exportgpos.md) +- [Endpoint Policy Manager Cloud: Deploy Group Policy Admin template settings over the internet](/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/admintemplatesmethods/deployinternet.md) + +## Admin Templates: Tips & Tricks + +- [The Ultimate Guide to Managing Screensavers](/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/admintemplatestips/screensavers.md) + +## Getting Started: Preferences 2.0 + +- [Endpoint Policy Manager Preferences: Printers (Consolidate GPOs and also deploy them via PP Cloud and your MDM service)](/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/gettingstarted/consolidateprinter.md) +- [Endpoint Policy Manager Preferences: Drive Maps (Consolidate GPOs and also deploy them via PP Cloud and your MDM service)](/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/gettingstarted/drivemaps.md) +- [Endpoint Policy Manager Preferences: Registry Items (Consolidate GPOs and also deploy them via PP Cloud and your MDM service)](/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/gettingstarted/consolidateregistry.md) +- [Endpoint Policy Manager Preferences: Shortcuts (Consolidate GPOs and also deploy them via PP Cloud and your MDM service)](/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/gettingstarted/shortcuts.md) + +## Exporting Group Policy Preferences / Using Endpoint Policy Preferences Manager + +- [Deliver GPPrefs items without using loopback mode](/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/exportinggrouppolicy/delivergpprefs.md) +- [Endpoint Policy Manager Cloud: Use PP Cloud to create a new local user on your endpoints](/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/exportinggrouppolicy/cloudlocaluser.md) diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/_category_.json new file mode 100644 index 0000000000..42f1360d98 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Application Settings Manager", + "position": 2, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/_category_.json new file mode 100644 index 0000000000..20ca7992c8 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Manual", + "position": 1, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/applicationsettings/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/applicationsettings/_category_.json new file mode 100644 index 0000000000..b864a4a990 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/applicationsettings/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Troubleshooting", + "position": 80, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/applicationsettings/advancednotes.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/applicationsettings/advancednotes.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/applicationsettings/advancednotes.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/applicationsettings/advancednotes.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/applicationsettings/client.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/applicationsettings/client.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/applicationsettings/client.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/applicationsettings/client.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/applicationsettings/clientissues.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/applicationsettings/clientissues.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/applicationsettings/clientissues.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/applicationsettings/clientissues.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/applicationsettings/enhancedclientlogging.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/applicationsettings/enhancedclientlogging.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/applicationsettings/enhancedclientlogging.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/applicationsettings/enhancedclientlogging.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/applicationsettings/extendedlogs.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/applicationsettings/extendedlogs.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/applicationsettings/extendedlogs.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/applicationsettings/extendedlogs.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/applicationsettings/overview.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/applicationsettings/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/applicationsettings/overview.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/applicationsettings/overview.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/applicationsettings/overview_1.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/applicationsettings/overview_1.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/applicationsettings/overview_1.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/applicationsettings/overview_1.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/applicationsettings/settings.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/applicationsettings/settings.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/applicationsettings/settings.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/applicationsettings/settings.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/applicationsettings/tuningbypassing.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/applicationsettings/tuningbypassing.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/applicationsettings/tuningbypassing.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/applicationsettings/tuningbypassing.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/applicationsettings/versionnumbers.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/applicationsettings/versionnumbers.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/applicationsettings/versionnumbers.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/applicationsettings/versionnumbers.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/appsetfiles/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/appsetfiles/_category_.json new file mode 100644 index 0000000000..451106de98 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/appsetfiles/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "AppSet Files", + "position": 40, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/appsetfiles/central.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/appsetfiles/central.md similarity index 97% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/appsetfiles/central.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/appsetfiles/central.md index 8bd3766d57..96ddf7d48f 100644 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/appsetfiles/central.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/appsetfiles/central.md @@ -23,7 +23,7 @@ Storage—automatically. If you are familiar with Group Policy's ADMX Central Storage, this feature is identical and accomplishes a similar task. For information on Microsoft's implementation of central storage, please read -[Understanding and fixing Endpoint Policy Manager DLL Orphans](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/dllorphans.md). +[Understanding and fixing Endpoint Policy Manager DLL Orphans](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/dllorphans.md). ::: diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/appsetfiles/findfixgpos.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/appsetfiles/findfixgpos.md similarity index 93% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/appsetfiles/findfixgpos.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/appsetfiles/findfixgpos.md index a0a6bbf7a9..5185226409 100644 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/appsetfiles/findfixgpos.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/appsetfiles/findfixgpos.md @@ -32,6 +32,6 @@ remediate the GPO. :::note To see an overview of the Endpoint Policy Manager GPOTouch utility repairing Endpoint Policy Manager DLL Orphans, please watch this video: -[Understanding and fixing Endpoint Policy Manager DLL Orphans](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/dllorphans.md). +[Understanding and fixing Endpoint Policy Manager DLL Orphans](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/dllorphans.md). ::: diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/appsetfiles/gpotouchutility.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/appsetfiles/gpotouchutility.md similarity index 90% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/appsetfiles/gpotouchutility.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/appsetfiles/gpotouchutility.md index 10cf060903..ac6cdf0603 100644 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/appsetfiles/gpotouchutility.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/appsetfiles/gpotouchutility.md @@ -30,6 +30,6 @@ Central Storage, Share-Based Storage, Local Store, or All GPOs with the latest A :::note To see an overview of the Endpoint Policy Manager GPOTouch utility, please watch this -tutorial video: [GPOTouch Utility](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/touchutility.md). +tutorial video: [GPOTouch Utility](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/touchutility.md). ::: diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/appsetfiles/local.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/appsetfiles/local.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/appsetfiles/local.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/appsetfiles/local.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/appsetfiles/overview.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/appsetfiles/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/appsetfiles/overview.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/appsetfiles/overview.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/appsetfiles/sharebased.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/appsetfiles/sharebased.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/appsetfiles/sharebased.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/appsetfiles/sharebased.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/appsetfiles/versioncontrol.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/appsetfiles/versioncontrol.md similarity index 98% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/appsetfiles/versioncontrol.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/appsetfiles/versioncontrol.md index 0fae6d0354..ecf477a502 100644 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/appsetfiles/versioncontrol.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/appsetfiles/versioncontrol.md @@ -142,7 +142,7 @@ Figure 84. Upgrading an existing Pak item with a newer DLL. :::note If you would like to see a video overview of how to manually migrate to newer DLLs and update GPOs, please watch this tutorial video: -[Understanding and fixing Endpoint Policy Manager DLL Orphans](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/dllorphans.md). +[Understanding and fixing Endpoint Policy Manager DLL Orphans](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/dllorphans.md). ::: diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/_category_.json new file mode 100644 index 0000000000..7fbe6f13a3 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "DesignStudio", + "position": 110, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/advanced.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/advanced.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/advanced.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/advanced.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/applicationsprojects/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/applicationsprojects/_category_.json new file mode 100644 index 0000000000..ba220ad19d --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/applicationsprojects/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Special Applications and Project Types", + "position": 150, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/applicationsprojects/controlpanel.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/applicationsprojects/controlpanel.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/applicationsprojects/controlpanel.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/applicationsprojects/controlpanel.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/applicationsprojects/hkeylocalmachine.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/applicationsprojects/hkeylocalmachine.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/applicationsprojects/hkeylocalmachine.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/applicationsprojects/hkeylocalmachine.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/applicationsprojects/javabased.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/applicationsprojects/javabased.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/applicationsprojects/javabased.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/applicationsprojects/javabased.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/applicationsprojects/mozillabased.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/applicationsprojects/mozillabased.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/applicationsprojects/mozillabased.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/applicationsprojects/mozillabased.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/applicationsprojects/overview.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/applicationsprojects/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/applicationsprojects/overview.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/applicationsprojects/overview.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/applicationsprojects/virtualized.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/applicationsprojects/virtualized.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/applicationsprojects/virtualized.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/applicationsprojects/virtualized.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/applockguids.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/applockguids.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/applockguids.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/applockguids.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/configurationwizard/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/configurationwizard/_category_.json new file mode 100644 index 0000000000..9efc903653 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/configurationwizard/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Configuring Elements Using the Configuration Wizard", + "position": 60, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/configurationwizard/additionalconfiguration.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/configurationwizard/additionalconfiguration.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/configurationwizard/additionalconfiguration.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/configurationwizard/additionalconfiguration.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/configurationwizard/commonerrors.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/configurationwizard/commonerrors.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/configurationwizard/commonerrors.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/configurationwizard/commonerrors.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/configurationwizard/defaultdataroots.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/configurationwizard/defaultdataroots.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/configurationwizard/defaultdataroots.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/configurationwizard/defaultdataroots.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/configurationwizard/elements/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/configurationwizard/elements/_category_.json new file mode 100644 index 0000000000..f50bdefef4 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/configurationwizard/elements/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Configuring Elements", + "position": 60, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/configurationwizard/elements/comboboxes.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/configurationwizard/elements/comboboxes.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/configurationwizard/elements/comboboxes.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/configurationwizard/elements/comboboxes.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/configurationwizard/elements/filefolderbrowsers.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/configurationwizard/elements/filefolderbrowsers.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/configurationwizard/elements/filefolderbrowsers.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/configurationwizard/elements/filefolderbrowsers.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/configurationwizard/elements/fontbrowsers.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/configurationwizard/elements/fontbrowsers.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/configurationwizard/elements/fontbrowsers.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/configurationwizard/elements/fontbrowsers.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/configurationwizard/elements/overview.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/configurationwizard/elements/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/configurationwizard/elements/overview.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/configurationwizard/elements/overview.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/configurationwizard/elements/radiobuttons.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/configurationwizard/elements/radiobuttons.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/configurationwizard/elements/radiobuttons.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/configurationwizard/elements/radiobuttons.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/configurationwizard/elements/slidersspinboxes.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/configurationwizard/elements/slidersspinboxes.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/configurationwizard/elements/slidersspinboxes.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/configurationwizard/elements/slidersspinboxes.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/configurationwizard/elements/textnumericboxes.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/configurationwizard/elements/textnumericboxes.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/configurationwizard/elements/textnumericboxes.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/configurationwizard/elements/textnumericboxes.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/configurationwizard/knownvalues.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/configurationwizard/knownvalues.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/configurationwizard/knownvalues.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/configurationwizard/knownvalues.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/configurationwizard/overview.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/configurationwizard/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/configurationwizard/overview.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/configurationwizard/overview.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/configurationwizard/usage.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/configurationwizard/usage.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/configurationwizard/usage.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/configurationwizard/usage.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/deleteelements.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/deleteelements.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/deleteelements.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/deleteelements.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/discover/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/discover/_category_.json new file mode 100644 index 0000000000..30bef0daa6 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/discover/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Discovering Configuration Data Locations", + "position": 50, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/discover/appdata.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/discover/appdata.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/discover/appdata.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/discover/appdata.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/discover/overview.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/discover/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/discover/overview.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/discover/overview.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/discover/programfiles.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/discover/programfiles.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/discover/programfiles.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/discover/programfiles.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/discover/sysinternalsprocessmonitor.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/discover/sysinternalsprocessmonitor.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/discover/sysinternalsprocessmonitor.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/discover/sysinternalsprocessmonitor.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/discover/virtualstore.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/discover/virtualstore.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/discover/virtualstore.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/discover/virtualstore.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/grayswizard.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/grayswizard.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/grayswizard.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/grayswizard.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/navigation/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/navigation/_category_.json new file mode 100644 index 0000000000..af14854f42 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/navigation/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Getting Around", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/navigation/overview.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/navigation/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/navigation/overview.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/navigation/overview.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/navigation/tab/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/navigation/tab/_category_.json new file mode 100644 index 0000000000..31292b8406 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/navigation/tab/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Tabs", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/navigation/tab/compilation.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/navigation/tab/compilation.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/navigation/tab/compilation.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/navigation/tab/compilation.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/navigation/tab/errorlist.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/navigation/tab/errorlist.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/navigation/tab/errorlist.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/navigation/tab/errorlist.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/navigation/tab/hierarchy.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/navigation/tab/hierarchy.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/navigation/tab/hierarchy.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/navigation/tab/hierarchy.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/navigation/tab/overview.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/navigation/tab/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/navigation/tab/overview.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/navigation/tab/overview.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/navigation/tab/properties.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/navigation/tab/properties.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/navigation/tab/properties.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/navigation/tab/properties.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/navigation/tab/propertiesproject.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/navigation/tab/propertiesproject.md similarity index 93% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/navigation/tab/propertiesproject.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/navigation/tab/propertiesproject.md index 56e9bdde42..d5ca5bbd1b 100644 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/navigation/tab/propertiesproject.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/navigation/tab/propertiesproject.md @@ -18,7 +18,7 @@ The Project Properties tab shows overall project properties such as the followin Figure 53. The Project Properties tab. Video: To understand predefined Item-Level Targeting (ILT) conditions, please see this video: -[Predefined ILTs (Internal Filters)](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/designstudio/itemleveltargeting.md). +[Predefined ILTs (Internal Filters)](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/designstudio/itemleveltargeting.md). For instance, you might want to ensure that your special DogFoodMaker Pro 12 app only works on portable Windows 10 machine with IE version 11 present. diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/navigation/vocabulary.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/navigation/vocabulary.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/navigation/vocabulary.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/navigation/vocabulary.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/overview.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/overview.md new file mode 100644 index 0000000000..4acd499f06 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/overview.md @@ -0,0 +1,23 @@ +--- +title: "DesignStudio" +description: "DesignStudio" +sidebar_position: 110 +--- + +# DesignStudio + +This document will help you to understand Netwrix Endpoint Policy Manager (formerly PolicyPak) +DesignStudio. However, you should only use this document after you have read and worked through the +DesignStudio example in Book 3: + +Application Settings Manager. We assume in this manual that you have already read that document and +can create simple AppSets. + +This document is a reference guide for the rest of the DesignStudio utility and addresses some +advanced scenarios. We won't be using this guide to build any one specific AppSet. Rather, we will +move from application to application pointing out some tips, tricks, and quirks which might be +applicable to many scenarios while building AppSets. + +Video: You may also wish to watch our DesignStudio videos, which cover some higher level details of +Endpoint Policy Manager: Application Manager > +[DesignStudio How-To](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/videolearningcenter.md). diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/quickstart/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/quickstart/_category_.json new file mode 100644 index 0000000000..9035a027a3 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/quickstart/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Quick Start", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/quickstart/createappset.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/quickstart/createappset.md similarity index 99% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/quickstart/createappset.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/quickstart/createappset.md index ec2f623986..92c4d80c7e 100644 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/quickstart/createappset.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/quickstart/createappset.md @@ -28,7 +28,7 @@ Policy Manager AppLock™ data **Step 3 –** Run `PolicyPak `DesignStudio to tweak, complete, and compile the AppSet If you followed along in -[Troubleshooting](/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/applicationsettings/overview.md), you installed WinZip on +[Troubleshooting](/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/applicationsettings/overview.md), you installed WinZip on your target machine, which is the kind of machine that regular users would run WinZip on. We will use WinZip in many of our later examples in this lesson. For these next steps, however, we are going to use PuTTY as our pilot application. We chose PuTTY because the interface has rarely changed over diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/quickstart/creationstation.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/quickstart/creationstation.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/quickstart/creationstation.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/quickstart/creationstation.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/quickstart/overview.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/quickstart/overview.md new file mode 100644 index 0000000000..8fecc92662 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/quickstart/overview.md @@ -0,0 +1,38 @@ +--- +title: "Quick Start" +description: "Quick Start" +sidebar_position: 10 +--- + +# Quick Start + +Netwrix Endpoint Policy Manager (formerly PolicyPak) DesignStudio is where you can create your own +AppSets or edit AppSets that we provide to you. PolicyPak DesignStudio can scrape the interfaces +from your existing applications, such as WinZip, and bring them into the Endpoint Policy Manager +format for later use inside Group Policy Objects (GPOs). + +Video: To see an overview of how to use Endpoint Policy Manager DesignStudio, watch this video: +[Creating Your First Pak using Endpoint Policy Manager Design Studio](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/designstudio/firstpak.md). + +:::note +The Endpoint Policy Manager format is properly called "pXML" format. You most likely will +never need to edit any pXML files by hand, but you're welcome to open up and explore the files that +are produced by the wizard. +::: + + +In this guide, you will be creating an AppSet for PuTTY, and open source SSH and telnet client. +You'll be doing the work on your Endpoint Policy Manager creation station. You'll also be using the +pre-configured AppSet for WinZip as a demonstration for other examples throughout this guide. + +Tip: We recommend that your Endpoint Policy Manager creation station have the same operating system +(and version) that your target machine does, if possible. Having a Endpoint Policy Manager creation +station that is a Server 2016 machine and a target machine that is a Windows 10 machine, for +example, may work fine. However, for ideal application compatibility, it's best if your Endpoint +Policy Manager creation station is as close as possible to your target machine. + +To keep things simple, we'll assume you'll be creating your AppSets from the same machine you used +to create GPOs. However, note that it is common to separate out these two roles, and Endpoint Policy +Manager makes it easy to do so. In this discussion, we'll assume you're using a Windows 10 machine +with the RSAT tools and the GPMC enabled. This will now be your Group Policy management station and +your Endpoint Policy Manager creation station. diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/regimporteruitility.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/regimporteruitility.md similarity index 88% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/regimporteruitility.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/regimporteruitility.md index 66ffd73549..5b257a80d4 100644 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/regimporteruitility.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/regimporteruitility.md @@ -8,7 +8,7 @@ sidebar_position: 120 :::note For an overview of this section, see this video: -[Use the DesignStudio to import existing registry keys](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/designstudio/importregistry.md). +[Use the DesignStudio to import existing registry keys](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/designstudio/importregistry.md). ::: @@ -33,4 +33,4 @@ matches which .reg file (see Figure 163). Figure 163. The .reg importer utility interface. For a full end-to-end example on this mini-utility, please watch the video here: -[Use the DesignStudio to import existing registry keys](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/designstudio/importregistry.md). +[Use the DesignStudio to import existing registry keys](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/designstudio/importregistry.md). diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/registrykeys.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/registrykeys.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/registrykeys.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/registrykeys.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/scrollablepanels.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/scrollablepanels.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/scrollablepanels.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/scrollablepanels.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/setup.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/setup.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/setup.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/setup.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/tools/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/tools/_category_.json new file mode 100644 index 0000000000..5f3f189794 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/tools/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Using DesignStudio Tools", + "position": 130, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/tools/batchcompile.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/tools/batchcompile.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/tools/batchcompile.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/tools/batchcompile.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/tools/globalsearchreplace.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/tools/globalsearchreplace.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/tools/globalsearchreplace.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/tools/globalsearchreplace.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/tools/options/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/tools/options/_category_.json new file mode 100644 index 0000000000..944dc582c2 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/tools/options/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Options", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/tools/options/compilation.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/tools/options/compilation.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/tools/options/compilation.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/tools/options/compilation.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/tools/options/java.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/tools/options/java.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/tools/options/java.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/tools/options/java.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/tools/options/misc.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/tools/options/misc.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/tools/options/misc.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/tools/options/misc.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/tools/options/overview.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/tools/options/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/tools/options/overview.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/tools/options/overview.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/tools/options/uicapture.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/tools/options/uicapture.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/tools/options/uicapture.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/tools/options/uicapture.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/tools/options/virtualstore.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/tools/options/virtualstore.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/tools/options/virtualstore.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/tools/options/virtualstore.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/tools/overview.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/tools/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/tools/overview.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/tools/overview.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/tools/pakpreview.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/tools/pakpreview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/tools/pakpreview.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/tools/pakpreview.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/tools/pxmlmergewizard.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/tools/pxmlmergewizard.md similarity index 97% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/tools/pxmlmergewizard.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/tools/pxmlmergewizard.md index 1918830276..61fed107bb 100644 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/tools/pxmlmergewizard.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/tools/pxmlmergewizard.md @@ -50,7 +50,7 @@ equivalent. So, in this example, we have Endpoint Policy Manager DesignStudio ru and capturing all the same items as the original project. :::note -[Troubleshooting](/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/applicationsettings/overview.md), it was +[Troubleshooting](/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/applicationsettings/overview.md), it was suggested that you should capture only three tabs for the first project. When you're merging pXML files, capture the same tabs you have in your original project. ::: diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/tools/showelementslist.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/tools/showelementslist.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/tools/showelementslist.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/tools/showelementslist.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/userinterface/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/userinterface/_category_.json new file mode 100644 index 0000000000..81e8a12d35 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/userinterface/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Crafting the User Interface of Your AppSet", + "position": 30, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/userinterface/capturewizard.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/userinterface/capturewizard.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/userinterface/capturewizard.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/userinterface/capturewizard.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/userinterface/manualadd.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/userinterface/manualadd.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/userinterface/manualadd.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/userinterface/manualadd.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/userinterface/manualedits/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/userinterface/manualedits/_category_.json new file mode 100644 index 0000000000..31f510ea1a --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/userinterface/manualedits/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Manual Edits", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/userinterface/manualedits/elementmodifications.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/userinterface/manualedits/elementmodifications.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/userinterface/manualedits/elementmodifications.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/userinterface/manualedits/elementmodifications.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/userinterface/manualedits/elementtransformations.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/userinterface/manualedits/elementtransformations.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/userinterface/manualedits/elementtransformations.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/userinterface/manualedits/elementtransformations.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/userinterface/manualedits/hiddentext.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/userinterface/manualedits/hiddentext.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/userinterface/manualedits/hiddentext.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/userinterface/manualedits/hiddentext.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/userinterface/manualedits/nonstandard.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/userinterface/manualedits/nonstandard.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/userinterface/manualedits/nonstandard.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/userinterface/manualedits/nonstandard.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/userinterface/manualedits/notmanaged.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/userinterface/manualedits/notmanaged.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/userinterface/manualedits/notmanaged.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/userinterface/manualedits/notmanaged.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/userinterface/manualedits/overview.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/userinterface/manualedits/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/userinterface/manualedits/overview.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/userinterface/manualedits/overview.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/userinterface/overview.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/userinterface/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/userinterface/overview.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/userinterface/overview.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/userinterface/subdialogs.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/userinterface/subdialogs.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/userinterface/subdialogs.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/userinterface/subdialogs.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/userinterface/unexpectedresults.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/userinterface/unexpectedresults.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/userinterface/unexpectedresults.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/designstudio/userinterface/unexpectedresults.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/extras/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/extras/_category_.json new file mode 100644 index 0000000000..d614cd15cd --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/extras/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Extras", + "position": 30, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/extras/appsetentry.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/extras/appsetentry.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/extras/appsetentry.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/extras/appsetentry.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/extras/appsetinternal.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/extras/appsetinternal.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/extras/appsetinternal.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/extras/appsetinternal.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/extras/managedby.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/extras/managedby.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/extras/managedby.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/extras/managedby.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/extras/multipleappsetspriority.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/extras/multipleappsetspriority.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/extras/multipleappsetspriority.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/extras/multipleappsetspriority.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/extras/overview.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/extras/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/extras/overview.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/extras/overview.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/extras/settingdescription.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/extras/settingdescription.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/extras/settingdescription.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/extras/settingdescription.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/_category_.json new file mode 100644 index 0000000000..6fd0fb7125 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Firefox AppSet", + "position": 90, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/addons/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/addons/_category_.json new file mode 100644 index 0000000000..02b44f0d0c --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/addons/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Add-Ons", + "position": 40, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/addons/discoveringids.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/addons/discoveringids.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/addons/discoveringids.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/addons/discoveringids.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/addons/enabledisable.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/addons/enabledisable.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/addons/enabledisable.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/addons/enabledisable.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/addons/enabledisableid.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/addons/enabledisableid.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/addons/enabledisableid.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/addons/enabledisableid.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/addons/forceinstallation.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/addons/forceinstallation.md similarity index 97% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/addons/forceinstallation.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/addons/forceinstallation.md index 28f070c936..f3a8d6070a 100644 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/addons/forceinstallation.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/addons/forceinstallation.md @@ -3,7 +3,7 @@ Endpoint Policy Manager also can install URL and file-based Firefox add-ons within Firefox. Video: To see a video of Endpoint Policy Manager forcing installation of Firefox's Add-Ons, go to -[Force Install Firefox Extensions (from URL or file).](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/extensions.md). +[Force Install Firefox Extensions (from URL or file).](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/extensions.md). Go to the Add-Ons tab within the Firefox AppSet, as shown in Figure 28. diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/addons/overview.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/addons/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/addons/overview.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/addons/overview.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/addons/tipstricks.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/addons/tipstricks.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/addons/tipstricks.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/addons/tipstricks.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/addons/wildcard.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/addons/wildcard.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/addons/wildcard.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/addons/wildcard.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/applicationhandlers.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/applicationhandlers.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/applicationhandlers.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/applicationhandlers.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/bookmarks.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/bookmarks.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/bookmarks.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/bookmarks.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/overview.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/overview.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/overview.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/overview_1.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/overview_1.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/overview_1.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/overview_1.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/permissions.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/permissions.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/permissions.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/permissions.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/preferences.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/preferences.md new file mode 100644 index 0000000000..471e8ea702 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/preferences.md @@ -0,0 +1,102 @@ +--- +title: "Hiding Preferences Pages and Other Special Elements" +description: "Hiding Preferences Pages and Other Special Elements" +sidebar_position: 50 +--- + +# Hiding Preferences Pages and Other Special Elements + +Netwrix Endpoint Policy Manager (formerly PolicyPak) is able to hide many Firefox elements, +sometimes with only one click. + +Video: To see a video of Endpoint Policy Manager disabling various Firefox user interface (UI) pages +see +[Disable the following about:config, about:addons, pages, Developer Menu, and any Preferences in one click](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/disable.md). + +For instance, you can select "Hide about:config UI" in the About:Config tab, as shown in Figure 32. + +![hiding_preferences_pages_and](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/hiding_preferences_pages_and.webp) + +Figure 32. Hiding the about:config page. + +Endpoint Policy Manager can hide the about:addons page UI with a checkbox in the Add-Ons: +Extensions, Appearance, Plugins, and Service page, as shown in Figure 33. + +![hiding_preferences_pages_and_1](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/hiding_preferences_pages_and_1.webp) + +Figure 33. Hiding the about:addons page. + +Endpoint Policy Manager can allow you to hide the Australis menu in FireFox (seen in Figure 34) by +clicking the "Hide Australis button" in the Extras tab, as shown in Figure 35. Endpoint Policy +Manager can also provide you with the ability to disable the web developer menu and many other +special pages, as shown in Figure 35. + +![hiding_preferences_pages_and_2](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/hiding_preferences_pages_and_2.webp) + +Figure 34. The Australis menu. + +![hiding_preferences_pages_and_3](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/hiding_preferences_pages_and_3.webp) + +Figure 35. Disabling the web developer menu and other special pages. + +Note that some of the options specifically require that the settings be right-clicked and locked in +order to work. This means they must be deployed on the Computer side, because only Group Policy +Objects (GPOs) based on the Computer side can be locked with the Firefox AppSet. + +Lastly, Endpoint Policy Manager has another huge array of special things that can be hidden within +the About:Preferences tab, as shown in Figure 36. + +![hiding_preferences_pages_and_4](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/hiding_preferences_pages_and_4.webp) + +Figure 36. Hiding preferences. + +The items on the left only require one click to get the expected response in Firefox. The special +box on the right can remove nearly every element in Firefox, but you need to know the special +element ID. + +Video: To see a video of Endpoint Policy Manager removing elements in about:prefrences, go to +[Firefox Remove Specific Elements from about:preferences panel](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/removeelements.md). + +For instance, let's imagine you wanted to hide the element "Play DRM-controlled content" in the +Content section, as shown in Figure 37. In this example, we did a search for DRM rather than +navigate to it through the menus. + +![hiding_preferences_pages_and_5](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/hiding_preferences_pages_and_5.webp) + +Figure 37. Hiding DRM-controlled content. + +Start by opening the Firefox web developer tools (press Ctrl + Shift + I) or select Options | +Developer | Toggle Tools, as shown in Figure 38. + +![hiding_preferences_pages_and_6](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/hiding_preferences_pages_and_6.webp) + +Figure 38. Web developer menu. + +Then, as shown in Figure 39, click the selector icon all the way on the left side, then click the +"Play DRM content" element. The element will light up with a red dotted box, and in the Inspector +pane, you'll see the element ID. + +![hiding_preferences_pages_and_7](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/hiding_preferences_pages_and_7.webp) + +Figure 39. Selecting the "Play DRM content" element. + +In this case, `checkbox id=" playDRMContent"`. Copy its value into the textbox in Firefox 23.0 +AppSet, as shown in Figure 40. You can also see another value, useMasterPassword, there as well to +show how multiple values are separated by commas. + +![hiding_preferences_pages_and_8](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/hiding_preferences_pages_and_8.webp) + +Figure 40. Copying the value to the Firefox 23.0 textbox. + +:::warning +All values are comma separated instead of being one per line. +::: + + +The result once Group Policy applies and Firefox is restarted is that the element is hidden. + +![hiding_preferences_pages_and_9](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/hiding_preferences_pages_and_9.webp) + +Figure 41. The DRM content setting is now hidden. + +Later, if the element ID is removed from the MMC, it will return back. diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/specialfeatures.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/specialfeatures.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/specialfeatures.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/specialfeatures.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/specialsections.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/specialsections.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/specialsections.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/specialsections.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/uninstall.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/uninstall.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/uninstall.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/firefox/uninstall.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/internetexplorer/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/internetexplorer/_category_.json new file mode 100644 index 0000000000..cd9eecf0b5 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/internetexplorer/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Internet Explorer AppSet", + "position": 100, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/internetexplorer/normalsections.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/internetexplorer/normalsections.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/internetexplorer/normalsections.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/internetexplorer/normalsections.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/internetexplorer/overview.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/internetexplorer/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/internetexplorer/overview.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/internetexplorer/overview.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/internetexplorer/specialsections.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/internetexplorer/specialsections.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/internetexplorer/specialsections.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/internetexplorer/specialsections.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/internetexplorer/tab/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/internetexplorer/tab/_category_.json new file mode 100644 index 0000000000..17ac93e0f9 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/internetexplorer/tab/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "IE AppSet Tabs", + "position": 30, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/internetexplorer/tab/advanced.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/internetexplorer/tab/advanced.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/internetexplorer/tab/advanced.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/internetexplorer/tab/advanced.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/internetexplorer/tab/compatibilityview.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/internetexplorer/tab/compatibilityview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/internetexplorer/tab/compatibilityview.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/internetexplorer/tab/compatibilityview.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/internetexplorer/tab/connections.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/internetexplorer/tab/connections.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/internetexplorer/tab/connections.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/internetexplorer/tab/connections.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/internetexplorer/tab/content.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/internetexplorer/tab/content.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/internetexplorer/tab/content.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/internetexplorer/tab/content.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/internetexplorer/tab/enterprisemode.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/internetexplorer/tab/enterprisemode.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/internetexplorer/tab/enterprisemode.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/internetexplorer/tab/enterprisemode.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/internetexplorer/tab/extras.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/internetexplorer/tab/extras.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/internetexplorer/tab/extras.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/internetexplorer/tab/extras.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/internetexplorer/tab/favoriteslinks.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/internetexplorer/tab/favoriteslinks.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/internetexplorer/tab/favoriteslinks.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/internetexplorer/tab/favoriteslinks.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/internetexplorer/tab/general.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/internetexplorer/tab/general.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/internetexplorer/tab/general.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/internetexplorer/tab/general.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/internetexplorer/tab/overview.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/internetexplorer/tab/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/internetexplorer/tab/overview.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/internetexplorer/tab/overview.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/internetexplorer/tab/privacy.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/internetexplorer/tab/privacy.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/internetexplorer/tab/privacy.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/internetexplorer/tab/privacy.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/internetexplorer/tab/programs.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/internetexplorer/tab/programs.md similarity index 92% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/internetexplorer/tab/programs.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/internetexplorer/tab/programs.md index 3264e4d12f..0b98bde7dd 100644 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/internetexplorer/tab/programs.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/internetexplorer/tab/programs.md @@ -8,7 +8,7 @@ sidebar_position: 60 Video: For a quick overview of how to manage the Programs tab using Endpoint Policy Manager Application Settings Manager, see the following video: -[Manage IE Programs Tab](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/programstab.md). +[Manage IE Programs Tab](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/programstab.md). The Internet Explorer Programs tab is where you can specify to enable or disable plugins, toolbars, extensions, accelerators, and search providers. An example of add-ons that you can manage in diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/internetexplorer/tab/security.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/internetexplorer/tab/security.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/internetexplorer/tab/security.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/internetexplorer/tab/security.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/modes/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/modes/_category_.json new file mode 100644 index 0000000000..e0b671749e --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/modes/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Modes", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/modes/acllockdown.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/modes/acllockdown.md similarity index 97% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/modes/acllockdown.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/modes/acllockdown.md index 6f67ee0e40..e114d978d9 100644 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/modes/acllockdown.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/modes/acllockdown.md @@ -8,7 +8,7 @@ sidebar_position: 50 :::note For a demonstration of the ACL Lockdown™ Mode feature, please see this video: -[ACL Lockdown for Registry Based Applications](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/acllockdown.md). +[ACL Lockdown for Registry Based Applications](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/featurestechsupport/acllockdown.md). ::: diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/modes/applock.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/modes/applock.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/modes/applock.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/modes/applock.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/modes/deliversettingsvalues.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/modes/deliversettingsvalues.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/modes/deliversettingsvalues.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/modes/deliversettingsvalues.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/modes/enforcement.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/modes/enforcement.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/modes/enforcement.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/modes/enforcement.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/modes/mouseshortcuts.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/modes/mouseshortcuts.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/modes/mouseshortcuts.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/modes/mouseshortcuts.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/modes/overview.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/modes/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/modes/overview.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/modes/overview.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/modes/reversion.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/modes/reversion.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/modes/reversion.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/modes/reversion.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/modes/settingsdeliveryreinforcementoptions.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/modes/settingsdeliveryreinforcementoptions.md similarity index 98% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/modes/settingsdeliveryreinforcementoptions.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/modes/settingsdeliveryreinforcementoptions.md index 82b6d527cc..0b1dce3362 100644 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/modes/settingsdeliveryreinforcementoptions.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/modes/settingsdeliveryreinforcementoptions.md @@ -67,7 +67,7 @@ network connectivity is not needed to run this command. :::note For a demonstration of this feature, please see this video: -[The Superpowers](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/superpowers.md). +[The Superpowers](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/featurestechsupport/superpowers.md). ::: diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/modes/switched.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/modes/switched.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/modes/switched.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/modes/switched.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/overview.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/overview.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/overview.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/overview_1.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/overview_1.md new file mode 100644 index 0000000000..bc9c7d6bc1 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/overview_1.md @@ -0,0 +1,101 @@ +--- +title: "Backup, Restore, and XML Export and Import" +description: "Backup, Restore, and XML Export and Import" +sidebar_position: 50 +--- + +# Backup, Restore, and XML Export and Import + +In this section, we're going to learn about how to backup and restore with regards to Netwrix +Endpoint Policy Manager (formerly PolicyPak) Application Settings Manager and understand how +Endpoint Policy Manager Application Settings Manager performs Group Policy reporting. + +Let's recall the three pieces that constitute Endpoint Policy Manager Application Settings Manager: + +- The pXML file created using Endpoint Policy Manager DesignStudio. This is your source file that + defines your AppSet. +- The Endpoint Policy Manager extension DLL. This is the output after you compile your pXML file, + which enables you to see your AppSet inside the group policy object (GPO). +- The Endpoint Policy Manager Application Settings Manager data that is stored in the GPO. This + defines the precise settings inside your GPO. + +## Backup and Restore + +:::note +Video: For an overview video of how to backup and restore, please see this +video:[Endpoint Policy Manager Application Settings Manager: Backup, Restore, Export, Import](/docs/endpointpolicymanager/gettingstarted/misc/videos/upgradingmaintenance/backup.md). +::: + + +The three pieces that constitute Endpoint Policy Manager Application Settings Manager should be +backed up in case of loss, failure, overwriting, or some other damage. Below, we describe some +suggested best practices for backing up your files. + +The pXML files you create with the Endpoint Policy Manager DesignStudio should be placed in a secure +place and be available in case of loss or damage. These are only text (XML) files and can be easily +stored. Be sure to have backups of these files in case of an emergency. Treat them like any other +important document in your company. + +The Endpoint Policy Manager extension DLLs are best placed in the Central Storage. These files are +then replicated to all domain controllers and are available for use when administrators roam from +machine to machine creating GPOs. However, these should also be backed up and stored in a secure +place where they can be available in case the Central Storage is damaged or someone deletes a +Endpoint Policy Manager extension DLL from it. These files are usually quite small and can be easily +stored. + +The Endpoint Policy Manager Application Settings Manager data inside a GPO is backed up and restored +with normal GPMC backup procedures, as seen in Figure 90. + +![backup_restore_and_xml_export](/images/endpointpolicymanager/troubleshooting/applicationsettings/backup/backup_restore_and_xml_export.webp) + +Figure 90. Backing up data with normal GPMC backup procedures. + +If a GPO is ever deleted, its data can be quickly restored using the GPMC's "Manage Backups" option, +also seen in Figure 89. + +When restoring, the Endpoint Policy Manager Application Settings Manager data and all the modes +(Enforcement, Reversion, and Endpoint Policy Manager AppLock™) are restored. + +## Settings for XML Export and Import + +:::note +For an overview of exporting and importing settings, please see this video: +[Endpoint Policy Manager Application Settings Manager: Backup, Restore, Export, Import](/docs/endpointpolicymanager/gettingstarted/misc/videos/upgradingmaintenance/backup.md) +(at the 2 minute and 50 second mark). +::: + + +The exact settings you specified inside an AppSet within a GPO can be exported and imported. This +might be useful if you have to test out different scenarios (perhaps again and again) but don't want +to start fresh every time with the defaults you set within the AppSet. You might also want to +configure a group of settings within an AppSet and share those exact settings with another +administrator for later implementation. + +The idea of exporting is simple: use your AppSet, set your settings, click on the Options button, +and then select "Export" to export the data, as seen in Figure 91. + +![backup_restore_and_xml_export_1](/images/endpointpolicymanager/troubleshooting/applicationsettings/backup/backup_restore_and_xml_export_1.webp) + +Figure 91. The exact settings you specified inside a Pak within a GPO can be exported and, later, +imported by selecting one of these options. + +You will be prompted for a location to save your data. Be sure to give a name that makes sense for +your AppSet, configuration scenario, or test case. Note that the file is an XML file and can only be +used to import data into the same (or very similarly configured) AppSet. It cannot be loaded into +the Endpoint Policy Manager DesignStudio or used for any other purpose. + +When you're ready, you can reverse the process by using the Endpoint Policy Manager | Import +function to import your previously exported settings. Note that an import will only change elements +that are defined within the XML you are importing. That is, the import process may overwrite some +existing values, and it may also leave existing values alone. Again, only values defined in the XML +are changed upon import. + +:::note +Exporting settings in XML is different than XML data export, which is described in +Appendix A: Using Endpoint Policy Manager with MDM and UEM Tools. Use "Exporting Directives as XML +Data Files" to export settings to save or reload into Group Policy Objects. Use XML data export +(Appendix A) to deploy Endpoint Policy Manager settings without using Group Policy Objects, for +instance, with use of Microsoft Endpoint Configuration Manager, Endpoint Policy Manager MDM or +Endpoint Policy Manager Cloud. + +::: diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/quickstartwithprecon/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/quickstartwithprecon/_category_.json new file mode 100644 index 0000000000..778501cd96 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/quickstartwithprecon/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Quick Start With Preconfigured AppSets", + "position": 10, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/quickstartwithprecon/acllockdown.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/quickstartwithprecon/acllockdown.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/quickstartwithprecon/acllockdown.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/quickstartwithprecon/acllockdown.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/quickstartwithprecon/automaticreapplicationchanges.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/quickstartwithprecon/automaticreapplicationchanges.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/quickstartwithprecon/automaticreapplicationchanges.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/quickstartwithprecon/automaticreapplicationchanges.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/quickstartwithprecon/leverageexisting.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/quickstartwithprecon/leverageexisting.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/quickstartwithprecon/leverageexisting.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/quickstartwithprecon/leverageexisting.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/quickstartwithprecon/revertappset.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/quickstartwithprecon/revertappset.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/quickstartwithprecon/revertappset.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/quickstartwithprecon/revertappset.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/quickstartwithprecon/specialnotes.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/quickstartwithprecon/specialnotes.md similarity index 97% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/quickstartwithprecon/specialnotes.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/quickstartwithprecon/specialnotes.md index 22e9b32f0e..324669215c 100644 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/quickstartwithprecon/specialnotes.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/quickstartwithprecon/specialnotes.md @@ -13,7 +13,7 @@ However, UI lockout is implemented differently and, as such, comes with a caveat :::note To see a video of Firefox UI lockout in action, watch the following video(s): -[Understanding and fixing Endpoint Policy Manager DLL Orphans](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/dllorphans.md). +[Understanding and fixing Endpoint Policy Manager DLL Orphans](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/dllorphans.md). ::: diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/quickstartwithprecon/testapplication.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/quickstartwithprecon/testapplication.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/quickstartwithprecon/testapplication.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/quickstartwithprecon/testapplication.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/quickstartwithprecon/testclient.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/quickstartwithprecon/testclient.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/quickstartwithprecon/testclient.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/quickstartwithprecon/testclient.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/underhood/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/underhood/_category_.json new file mode 100644 index 0000000000..a89b9d2e4a --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/underhood/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Reporting and What's Happening \"Under the Hood\"", + "position": 70, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/underhood/deliveredreverted.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/underhood/deliveredreverted.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/underhood/deliveredreverted.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/underhood/deliveredreverted.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/underhood/overview.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/underhood/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/underhood/overview.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/underhood/overview.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/underhood/precedence.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/underhood/precedence.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/underhood/precedence.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/underhood/precedence.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/underhood/reporting.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/underhood/reporting.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/underhood/reporting.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/underhood/reporting.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/variables.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/variables.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/variables.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/manual/variables.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/_category_.json new file mode 100644 index 0000000000..976ee0414f --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Tech Notes", + "position": 3, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "knowledgebase" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/centralstoresharing/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/centralstoresharing/_category_.json new file mode 100644 index 0000000000..74c4f3c6b7 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/centralstoresharing/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Central Store And Sharing", + "position": 20, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/centralstoresharing/dllstorage.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/centralstoresharing/dllstorage.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/centralstoresharing/dllstorage.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/centralstoresharing/dllstorage.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/designstudio/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/designstudio/_category_.json new file mode 100644 index 0000000000..e007ac6bf7 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/designstudio/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Design Studio", + "position": 50, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/designstudio/creation.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/designstudio/creation.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/designstudio/creation.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/designstudio/creation.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/designstudio/designstudioadditional.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/designstudio/designstudioadditional.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/designstudio/designstudioadditional.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/designstudio/designstudioadditional.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/_category_.json new file mode 100644 index 0000000000..9803f86263 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "General Configuration And Operation", + "position": 10, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/centralstore.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/centralstore.md similarity index 89% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/centralstore.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/centralstore.md index 5153ce00ee..89aa426d75 100644 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/centralstore.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/centralstore.md @@ -12,4 +12,4 @@ domain controllers within your network called "PolicPak". Then copy the Endpoint files that currently reside in your local storage and paste them into that folder. Here is the how-to video: -[Working with Others and using the Central Store](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/centralstorework.md) +[Working with Others and using the Central Store](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/centralstorework.md) diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/checkmarks.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/checkmarks.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/checkmarks.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/checkmarks.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/designstudio.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/designstudio.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/designstudio.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/designstudio.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/designstudiowindows7.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/designstudiowindows7.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/designstudiowindows7.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/designstudiowindows7.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/downgrade.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/downgrade.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/downgrade.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/downgrade.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/expires.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/expires.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/expires.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/expires.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/feature.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/feature.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/feature.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/feature.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/files.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/files.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/files.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/files.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/fontsetting.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/fontsetting.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/fontsetting.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/fontsetting.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/gpo.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/gpo.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/gpo.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/gpo.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/gpooutofscope.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/gpooutofscope.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/gpooutofscope.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/gpooutofscope.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/gpos.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/gpos.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/gpos.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/gpos.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/gpos_1.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/gpos_1.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/gpos_1.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/gpos_1.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/language.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/language.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/language.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/language.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/latestupdates.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/latestupdates.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/latestupdates.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/latestupdates.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/limitations.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/limitations.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/limitations.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/limitations.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/lyncclient.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/lyncclient.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/lyncclient.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/lyncclient.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/modifydll.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/modifydll.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/modifydll.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/modifydll.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/onegpo.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/onegpo.md similarity index 86% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/onegpo.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/onegpo.md index 67bcae0bdd..3449c2fabd 100644 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/onegpo.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/onegpo.md @@ -6,7 +6,7 @@ sidebar_position: 250 # Should I put lots of Paks (or other PP directives into one GPO?) -[How many Endpoint Policy Manager policies can I create within one Group Policy Object?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/limitations.md) +[How many Endpoint Policy Manager policies can I create within one Group Policy Object?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/limitations.md) Then, as a suggestion, the best practice for Netwrix Endpoint Policy Manager (formerly PolicyPak) is to have one GPO for each "thing" you want to do. diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/onetime.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/onetime.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/onetime.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/onetime.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/permissions.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/permissions.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/permissions.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/permissions.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/printers.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/printers.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/printers.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/printers.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/rolesresponsibilities.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/rolesresponsibilities.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/rolesresponsibilities.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/rolesresponsibilities.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/side.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/side.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/side.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/side.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/updatedcommands.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/updatedcommands.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/updatedcommands.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/updatedcommands.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/upgrade.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/upgrade.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/upgrade.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/upgrade.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/windowsremoteassistance.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/windowsremoteassistance.md similarity index 94% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/windowsremoteassistance.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/windowsremoteassistance.md index f7e2ce0fa2..3457254c12 100644 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/windowsremoteassistance.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/windowsremoteassistance.md @@ -85,5 +85,5 @@ articles. Reference Article -- [How to use Scripts Manager to workaround the "PPAppLockdr64.dll is either not designed to run on Windows or it contains an error" message when running Microsoft Remote Assistance (MSRA.exe) and the Endpoint Policy Manager CSE is installed on Windows 10 1903](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/microsoftremoteassistance.md) -- [Deploy any script via the Cloud to domain joined and non-domain joined machines](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/gettingstarted/cloud.md) +- [How to use Scripts Manager to workaround the "PPAppLockdr64.dll is either not designed to run on Windows or it contains an error" message when running Microsoft Remote Assistance (MSRA.exe) and the Endpoint Policy Manager CSE is installed on Windows 10 1903](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/microsoftremoteassistance.md) +- [Deploy any script via the Cloud to domain joined and non-domain joined machines](/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/gettingstarted/cloud.md) diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/knowledgebase.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/knowledgebase.md new file mode 100644 index 0000000000..b5435d4f95 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/knowledgebase.md @@ -0,0 +1,138 @@ +--- +title: "Knowledge Base" +description: "Knowledge Base" +sidebar_position: 10 +--- + +# Knowledge Base + +See the following Knowledge Base articles for Application Manager. + +## General Configuration & Operation + +- [What if I am having trouble getting the Licensing GPO installed?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/gpo.md) +- [What happens to Application Settings Manager settings when the Endpoint Policy Manager license expires / if my company chooses not to renew?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/gpooutofscope.md) +- [Is there an easy way to back up the GPO's I configured with Application Manager?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/gpos.md) +- [Can I Export my GPO settings so that they can be used in the future to create similar GPOs?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/gpos_1.md) +- [How many Endpoint Policy Manager policies can I create within one Group Policy Object?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/limitations.md) +- [We upgraded our DLL files recently after creating a new Pak with Design Studio. After the implementation we would like to revert back to the original Pak. I have a local copy of the former DLL. Can I downgrade to the curre](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/downgrade.md) +- [Application Manager Roles and Responsibilities](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/rolesresponsibilities.md) +- [I deselected the Applock feature, Disable whole tab in target application, but the elements are still grayed out. How can I fix this?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/feature.md) +- [I am selecting values for certain settings for the Lync client. On the Alerts tab, I am selecting and deselecting various radio buttons but none of these selections are being underlined. Why is this?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/lyncclient.md) +- [I am configuring the values for some settings for an application. Many of these settings involve checkmarks which are unchecked by default. How can I tell if an unchecked checkbox is being delivered or not?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/checkmarks.md) +- [How can I use the Endpoint Policy ManagerCentral store (if I was already using the Endpoint Policy Manager Local store?)](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/centralstore.md) +- [How can I keep abreast of the latest Endpoint Policy Manager updates as they are released?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/latestupdates.md) +- [Should I create Endpoint Policy Application Manager policies on the USER or COMPUTER side?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/side.md) +- [What is the difference between running the gp update (Microsoft) and ppupdate (Endpoint Policy Manager) commands?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/updatedcommands.md) +- [Does Application Manager work when the machine is NOT US-English (say, Italian or Russian?)](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/language.md) +- [Can Application Manager help me in pushing, assigning or configuring printers?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/printers.md) +- [Can I deploy the Application Manager settings I've configured as a one-time only deployment like Group Policy Preferences does?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/onetime.md) +- [Are there any required permission settings for a Endpoint Policy ManagerAdministrator to store Endpoint Policy Manager Suite DLL Extensions to the central store?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/permissions.md) +- [Should I backup my Pak files?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/files.md) +- [I'm trying to find a particular font setting in one of your Word Paks but I can't find it. Is the setting not supported?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/fontsetting.md) +- [Is there a particular naming scheme I need to use when compiling my Paks within Design Studio?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/designstudio.md) +- [I need to modify the Pak (DLL file) of one of the applications I control with Application Manager. Will I lose my group policy settings after I modify the DLL file](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/modifydll.md) +- [I installed Design Studio on a Windows 7 Laptop but there are still some XP and Vista stations in our network. Will the Paks I create work for all three operating system?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/designstudiowindows7.md) +- [Should I put lots of Paks (or other PP directives into one GPO?)](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/onegpo.md) +- [How-to gain access of a remote computer using built-in Windows Remote Assistance application?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/windowsremoteassistance.md) +- [How do I upgrade Application Manager when I upgrade my DCs / servers?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/upgrade.md) + +## Central Store and Sharing + +- [Can I store the DLL extensions in a central location AND locally on the machine I create my Paks on and if so which one is utilized?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/centralstoresharing/dllstorage.md) + +## PreConfigured AppSets + +- [Admin Console (Item Level Targeting): Why would I want to bypass Internal (pre-defined) Item Level Targeting?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/bypassinternal.md) +- [Chrome: How to Configure Chrome HomePage using Application Manager](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/home.md) +- [Chrome: How do I manage certificates with Google Chrome?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/certificates.md) +- [Chrome Policies don't appear to work when using Endpoint Policy Manager Cloud.](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/policies.md) +- [Chrome: How do I manage the Proxy settings for Google Chrome?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/proxysettings.md) +- [Chrome: How do I block Local File access to Google Chrome with Endpoint Policy Manager?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/localfileaccess.md) +- [Chrome: Why do I have extra tabs appear when I open Chrome on an endpoint?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/extratabs.md) +- [Chrome: Why Homepage button URL is not working for Google Chrome?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/homebuttonurl.md) +- [Firefox: How do I make Application Settings Manager work with Firefox 115 and later (and how do I transition existing settings?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/transition.md) +- [Firefox: How do I troubleshoot adding Certificates with Endpoint Policy Manager and Firefox?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/certificates_1.md) +- [Firefox: How can I deliver Certificates to "Certificate Authority" store and select "websites", "mail users" and "software makers"?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/authority.md) +- [Firefox: How can I prevent both automatic AND manual updates for Firefox?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/preventupdates.md) +- [Firefox: How can I use Endpoint Policy Manager to revert Firefox's Options back to the "Old Style" ?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/revertoptions.md) +- [Firefox: How do I use the NTLM passthru (URIS) settings in the Firefox / about:config AppSets?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/ntlmpassthru.md) +- [Firefox: What versions of the Endpoint Policy Manager CSE support managing certificates in what versions of Firefox?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/version.md) +- [Firefox: Can I enable / disable add-ons for Firefox?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/addons.md) +- [Firefox: Can I deliver, manage and/or revoke certificates directly to Firefox?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/certificates_2.md) +- [Can I use Security.enterprise_roots.enabled as an alternate method for FF + Certificates?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/securityenterpriseroots.md) +- [Firefox (and Java and Thunderbird): Why can't I seem to find (or perform) UI lockdown for Firefox, Java or Thunderbird ?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/javathunderbird.md) +- [Firefox: Is Endpoint Policy Manager compatible with the Frontmotion packaged MSI version of Firefox?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/frontmotion.md) +- [Firefox: Is Endpoint Policy Manager compatible with Firefox when installed to non-standard (and portable) locations?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/nonstandardlocation.md) +- [Firefox: Is Endpoint Policy Manager compatible with Firefox ESR?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/esr.md) +- [Firefox: How do I set "Allow Now", "Allow and Remember" or "Block Plugin" as plug-ins are requested?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/allowremember.md) +- [Firefox: How do I stop the "Firefox automatically sends some data to Mozilla so that we can improve your experience" message?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/stopsenddatamessage.md) +- [Firefox: How can I fix Dark Theme / Firefox 56 when using Endpoint Policy Manager?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/darktheme.md) +- [Firefox: Why doesn't the Firefox Applications Handler function work as expected?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/applicationshandlerfunction.md) +- [Firefox: Why don't I see Bookmarks and Pop-Ups settings set when user has NEVER run Firefox before?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/bookmarkpopups.md) +- [HowTo: What do I do if I find a problem with a preconfigured AppSet?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/issue.md) +- [HowTo: One of my AppSet entry's settings is not getting delivered on target machines. What should be the first thing to look into?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/entrysettings.md) +- [HowTo: Which "side" of GPO should I deploy AppSets to: User or Computer side?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/side.md) +- [Internet Explorer: I'm trying to use IE 11's Enterprise Mode, but it doesn't appear to be working?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/11enterprisemode.md) +- [Internet Explorer: Can I enable / disable add-ons for Internet Explorer?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/addons_1.md) +- [Internet Explorer: Can I deliver, manage and/or revoke certificates directly to Internet Explorer?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/certificates_3.md) +- [Internet Explorer: How do I deploy custom settings to zones?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/customsettings.md) +- [Internet Explorer: When should I use Compatibility mode vs. Enterprise Mode for IE 11?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/mode.md) +- [Internet Explorer: Why don't HTTP sites get added to the Trusted Site list?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/httpsites.md) +- [Internet Explorer: Why does IE fail to launch after I apply ACL lockdown or all of the IE AppSet STIG settings?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/launchfailstig.md) +- [Internet Explorer: Why Internet Explorer is not launching after I apply "Perform ACL Lockdown"?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/launchfail.md) +- [Java: Using the Pre-configured AppSet for Java, how do I prevent "Java has discovered application components that could indicate a security concern." Pop up?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/securitypopup.md) +- [Java: How to disable prompt "Your Java version is out of date."?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/versionoutofdate.md) +- [Java: How to disable prompt "You Java version is insecure"?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/versioninsecure.md) +- [Java: How to disable Java prompt "Do you want to run this application?"](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/runapplication.md) +- [Java: How to disable User Account Control prompt for Java Auto Updater?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/useraccountcontrol.md) +- [Java: How to disable Task tray notification balloon events?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/tasktray.md) +- [Java: I don't see that any changes are working at all. What can I try first?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/issue_1.md) +- [Java: Java Site List Exceptions just stopped working. What can I do to fix this?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/sitelistexceptions.md) +- [Other: What is "Internal (pre-Defined)" Item Level Targeting?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/internalpredefined.md) +- [Other: Is "Internal Item-Level Targeting" on by default?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/bydefault.md) +- [Other: I added a AppSet and some items are grayed out / not available. In other AppSets, everything seems available. What's happening?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/itemsunavailable.md) +- [AppSets: Why are there some areas of the pre-configured AppSet greyed out or not accessable?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/unavailable.md) +- [AppSets: Why do some AppSets have pre-defined Item Level Targeting for an EXACT version number, and others say "Version 7 to 99" (or similar)?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/versions.md) +- [AppSets: What is the official support policy for the pre-configured AppSets?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/supportpolicy.md) +- [AppSets: How will I know that an existing AppSet will work with the version of the application I have today (and tomorrow)?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/versionsupport.md) +- [AppSets: How often do the AppSets for specific apps get updated?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/updates.md) + +## Virtualized Applications + +- [Do I need to do anything special to get Application Manager to deploy settings to Microsoft App-V Sequences?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/virtualizedapplications/appvsequences.md) +- [A ThinApp throws an "Exception Error". What can I do to fix it?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/virtualizedapplications/exception.md) +- [Which application virtualization platforms are supported?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/virtualizedapplications/applicationvirtualization.md) +- [How can I manage a version of Java inside a ThinApp package ?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/virtualizedapplications/thinapp.md) +- [Are there any additional steps required to integrate Endpoint Policy Manager Software with XenAPP applications?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/virtualizedapplications/xenapp.md) +- [Can Endpoint Policy Manager deliver settings for applications that are provided by XenAPP?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/virtualizedapplications/xenapp_1.md) + +## Design Studio + +- [Besides the installation of Design Studio, are there any additional components I need on my computer in order to create my own AppSets?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/designstudio/designstudioadditional.md) +- [What must I do to prepare for Endpoint Policy Manager Tech Support to assist me with AppSet creation?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/designstudio/creation.md) + +## Troubleshooting + +- [Are there any caveats about removing the Endpoint Policy Manager CSE after it is deployed?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/removeclientsideextension.md) +- [I just upgraded my management station to 785. My LOCAL AppSets are now missing. What happened?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/localmissing.md) +- [Troubleshooting Group Policy Replication Problems](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/replication.md) +- [It appears that Endpoint Policy Manager is processing AppSet entries from another Group Policy Object. How is this possible?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/other.md) +- [Troubleshooting Application Manager – Basic Steps BEFORE calling or emailing Tech Support](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/basicsteps.md) +- [What are the two ways to export AppSet settings and why would I use one over the other?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/appset.md) +- [Which log file should I consult in order to troubleshoot when one or more settings are not getting applied to the Computer?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/settings.md) +- [How do I know if Application Manager is not behaving properly versus the target application not behaving properly?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/applicationissue.md) +- [How is Item Level Targeting handled in reports?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/reports.md) +- [I'm using redirected folders and get un-expected results.](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/redirectedfolder.md) +- [AppLock (UI lockdown) doesn't seem to work on some applications. Why?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/someapplications.md) +- [Endpoint Policy Manager should be reapplying my settings on application launch time. Why doesn't "reapply on launch" work ?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/reapplylaunch.md) +- [Why does Symantec Endpoint Protection (or SEP for Small business) report that Endpoint Policy Manager is "tampering" ?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/symantecendpointprotection.md) +- [Why does Windows Remote Assistance (MSRA) report "PPAppLockdr64.dll is not designed to run on Windows or it contains an error" 0xc000428 ?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/code0xc000428.md) +- [How to use Scripts Manager to workaround the "PPAppLockdr64.dll is either not designed to run on Windows or it contains an error" message when running Microsoft Remote Assistance (MSRA.exe) and the Endpoint Policy Manager CSE is installed on Windows 10 1903](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/microsoftremoteassistance.md) +- [How do I turn AppLock off or on based upon the CSE version I'm using?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/disable.md) +- [How do I turn off "Reapply on Launch" for all applications if asked by tech support?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/reapplylaunchdisable.md) +- [When I use Forcepoint, Firefox takes 15 minutes to open. How can I fix this?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/forcepoint.md) +- [I do not have access or ability to create the Central Store. What should the best practice to store AppSets be?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/storage.md) +- [What happens to Application Settings Manager settings when the Endpoint Policy Manager license expires / if my company chooses not to renew?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/gpooutofscope.md) +- [Why does Microsoft 365 Defender report suspicious encoded content in Endpoint Policy Manager Application Settings Manager values?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/microsoftdefender.md) +- [Why do I see "Extra Registry Settings" in Endpoint Policy Manager Application Settings Manager items in the GPMC?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/gpmc.md) diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/11enterprisemode.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/11enterprisemode.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/11enterprisemode.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/11enterprisemode.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/_category_.json new file mode 100644 index 0000000000..7038db794f --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "PreConfigured AppSets", + "position": 30, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/addons.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/addons.md similarity index 80% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/addons.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/addons.md index 0c0315f3ab..ebffbbbf92 100644 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/addons.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/addons.md @@ -8,4 +8,4 @@ sidebar_position: 160 Yes. Here is a videos to demonstrate that. -[Manage Firefox Add-ons using Group Policy](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/addons.md) +[Manage Firefox Add-ons using Group Policy](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/addons.md) diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/addons_1.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/addons_1.md new file mode 100644 index 0000000000..72f19b12a1 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/addons_1.md @@ -0,0 +1,11 @@ +--- +title: "Internet Explorer: Can I enable / disable add-ons for Internet Explorer?" +description: "Internet Explorer: Can I enable / disable add-ons for Internet Explorer?" +sidebar_position: 320 +--- + +# Internet Explorer: Can I enable / disable add-ons for Internet Explorer? + +Yes. Here is a videos to demonstrate that. + +[Manage IE Programs Tab](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/programstab.md) diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/allowremember.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/allowremember.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/allowremember.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/allowremember.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/applicationshandlerfunction.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/applicationshandlerfunction.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/applicationshandlerfunction.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/applicationshandlerfunction.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/authority.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/authority.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/authority.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/authority.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/bookmarkpopups.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/bookmarkpopups.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/bookmarkpopups.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/bookmarkpopups.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/bydefault.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/bydefault.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/bydefault.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/bydefault.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/bypassinternal.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/bypassinternal.md similarity index 94% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/bypassinternal.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/bypassinternal.md index 0e599a87c9..e4c8c441cb 100644 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/bypassinternal.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/bypassinternal.md @@ -30,4 +30,4 @@ You might want to do this for several reasons: For a video expressing how to bypass Internal ILT, see: -[Bypassing Internal Item Level Targeting Filters](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/itemleveltargetingbypass.md) +[Bypassing Internal Item Level Targeting Filters](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/featurestechsupport/itemleveltargetingbypass.md) diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/certificates.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/certificates.md similarity index 79% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/certificates.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/certificates.md index 3367586a00..6c7e79047f 100644 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/certificates.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/certificates.md @@ -12,4 +12,4 @@ setting Chrome at the same time. Here's the how-to video in using the IE + Certs features (again, which should also set Chrome too): -[Manage IE Certificates](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/certificates.md) +[Manage IE Certificates](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/certificates.md) diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/certificates_1.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/certificates_1.md similarity index 97% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/certificates_1.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/certificates_1.md index 73f24adcfb..f3cbb0f073 100644 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/certificates_1.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/certificates_1.md @@ -27,7 +27,7 @@ must do these step by step.) **Step 1 –** Check the compatibility chart first -[Firefox: What versions of the Endpoint Policy Manager CSE support managing certificates in what versions of Firefox?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/version.md) +[Firefox: What versions of the Endpoint Policy Manager CSE support managing certificates in what versions of Firefox?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/version.md) **Step 2 –** Watch the Netwrix Endpoint Policy Manager (formerly PolicyPak) and Firefox cert video for a how-to diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/certificates_2.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/certificates_2.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/certificates_2.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/certificates_2.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/certificates_3.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/certificates_3.md new file mode 100644 index 0000000000..a5531767e5 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/certificates_3.md @@ -0,0 +1,11 @@ +--- +title: "Internet Explorer: Can I deliver, manage and/or revoke certificates directly to Internet Explorer?" +description: "Internet Explorer: Can I deliver, manage and/or revoke certificates directly to Internet Explorer?" +sidebar_position: 330 +--- + +# Internet Explorer: Can I deliver, manage and/or revoke certificates directly to Internet Explorer? + +Yes, Here is a videos to demonstrate that. + +[Manage IE Certificates](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/certificates.md) diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/customsettings.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/customsettings.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/customsettings.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/customsettings.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/darktheme.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/darktheme.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/darktheme.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/darktheme.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/entrysettings.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/entrysettings.md similarity index 89% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/entrysettings.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/entrysettings.md index ba198358e4..192e0118bc 100644 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/entrysettings.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/entrysettings.md @@ -17,4 +17,4 @@ specific. See this video to bypass the ILT: -[Bypassing Internal Item Level Targeting Filters](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/itemleveltargetingbypass.md) +[Bypassing Internal Item Level Targeting Filters](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/featurestechsupport/itemleveltargetingbypass.md) diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/esr.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/esr.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/esr.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/esr.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/extratabs.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/extratabs.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/extratabs.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/extratabs.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/frontmotion.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/frontmotion.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/frontmotion.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/frontmotion.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/home.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/home.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/home.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/home.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/homebuttonurl.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/homebuttonurl.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/homebuttonurl.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/homebuttonurl.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/httpsites.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/httpsites.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/httpsites.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/httpsites.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/internalpredefined.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/internalpredefined.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/internalpredefined.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/internalpredefined.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/issue.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/issue.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/issue.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/issue.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/issue_1.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/issue_1.md similarity index 90% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/issue_1.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/issue_1.md index cf5d453d82..d6e222a3bb 100644 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/issue_1.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/issue_1.md @@ -20,4 +20,4 @@ setting by disabling the internal item-level targeting. To see a demonstration video about Internal Filters and bypassing them, please see this -[Bypassing Internal Item Level Targeting Filters](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/itemleveltargetingbypass.md) +[Bypassing Internal Item Level Targeting Filters](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/featurestechsupport/itemleveltargetingbypass.md) diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/itemsunavailable.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/itemsunavailable.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/itemsunavailable.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/itemsunavailable.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/javathunderbird.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/javathunderbird.md similarity index 93% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/javathunderbird.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/javathunderbird.md index ce51f18b87..d2d4bab1ac 100644 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/javathunderbird.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/javathunderbird.md @@ -16,11 +16,11 @@ Tip: To see a video of FireFox UI lockout in action, see the following video: Tip: To see a video of Thunderbird UI lockout in action, see the following video: -[Endpoint Policy Manager for Thunderbird](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/otherapplications/thunderbird.md) +[Endpoint Policy Manager for Thunderbird](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/otherapplications/thunderbird.md) Tip: To see a video of Java UI lockout in action, see the following video: -[Endpoint Policy Manager for Thunderbird](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/otherapplications/thunderbird.md) +[Endpoint Policy Manager for Thunderbird](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/otherapplications/thunderbird.md) Specifically, to perform UI lockout of FireFox, Thunderbird and Java, the GPO must be linked such that the computer is affected. Said another way, you cannot perform UI lockdown on FireFox, diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/launchfail.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/launchfail.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/launchfail.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/launchfail.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/launchfailstig.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/launchfailstig.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/launchfailstig.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/launchfailstig.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/localfileaccess.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/localfileaccess.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/localfileaccess.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/localfileaccess.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/mode.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/mode.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/mode.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/mode.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/nonstandardlocation.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/nonstandardlocation.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/nonstandardlocation.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/nonstandardlocation.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/ntlmpassthru.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/ntlmpassthru.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/ntlmpassthru.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/ntlmpassthru.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/policies.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/policies.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/policies.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/policies.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/preventupdates.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/preventupdates.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/preventupdates.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/preventupdates.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/proxysettings.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/proxysettings.md similarity index 76% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/proxysettings.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/proxysettings.md index f3cf470f30..ecb06afad2 100644 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/proxysettings.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/proxysettings.md @@ -13,4 +13,4 @@ Explorer. See this video for more details, which will also set the Chrome Pak: -[Manage IE Connections tab](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/connectionstab.md) +[Manage IE Connections tab](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/connectionstab.md) diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/revertoptions.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/revertoptions.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/revertoptions.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/revertoptions.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/runapplication.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/runapplication.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/runapplication.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/runapplication.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/securityenterpriseroots.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/securityenterpriseroots.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/securityenterpriseroots.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/securityenterpriseroots.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/securitypopup.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/securitypopup.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/securitypopup.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/securitypopup.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/side.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/side.md similarity index 90% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/side.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/side.md index eb5de45b6c..e379850dd9 100644 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/side.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/side.md @@ -24,4 +24,4 @@ So, our general recommendation (if you're looking for one) is: For more information on this, see the following FAQ item. -[Firefox (and Java and Thunderbird): Why can't I seem to find (or perform) UI lockdown for Firefox, Java or Thunderbird ?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/javathunderbird.md) +[Firefox (and Java and Thunderbird): Why can't I seem to find (or perform) UI lockdown for Firefox, Java or Thunderbird ?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/javathunderbird.md) diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/sitelistexceptions.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/sitelistexceptions.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/sitelistexceptions.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/sitelistexceptions.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/stopsenddatamessage.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/stopsenddatamessage.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/stopsenddatamessage.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/stopsenddatamessage.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/supportpolicy.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/supportpolicy.md similarity index 91% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/supportpolicy.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/supportpolicy.md index 15916602d5..83d78d1f44 100644 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/supportpolicy.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/supportpolicy.md @@ -26,5 +26,5 @@ Again, the AppSets themselves are not officially supported. Those are "examples" we provide "best effort" support on those if a problem is found. (See the FAQ question -"[HowTo: What do I do if I find a problem with a preconfigured AppSet?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/issue.md)" for more +"[HowTo: What do I do if I find a problem with a preconfigured AppSet?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/issue.md)" for more information.) diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/tasktray.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/tasktray.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/tasktray.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/tasktray.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/transition.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/transition.md new file mode 100644 index 0000000000..7c7463f36a --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/transition.md @@ -0,0 +1,340 @@ +--- +title: "Firefox: How do I make Application Settings Manager work with Firefox 115 and later (and how do I transition existing settings?" +description: "Firefox: How do I make Application Settings Manager work with Firefox 115 and later (and how do I transition existing settings?" +sidebar_position: 90 +--- + +# Firefox: How do I make Application Settings Manager work with Firefox 115 and later (and how do I transition existing settings? + +This document is only needed for customers using Netwrix Endpoint Policy Manager (formerly +PolicyPak) Application Settings Manager and Firefox ESR. There is no required special workaround for +Endpoint Policy Manager Browser Router except using the latest Endpoint Policy Manager CSE and +Firefox ESR 115 and later. + +Update for 24.11 CSE + +Firefox 128 has made a breaking change requiring an update to the CSE and the Firefox 115 and later +Pak to continue functioning. + +The only supported configuration going forward for Firefox 128 support is CSE 24.11 (or later) and +the Firefox 115 and later pak, which is compiled (and signed) from Netwrix with date stamp 11/7/2024 +and later. + +![transition](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/transition.webp) + +Previous Details (Pre 24.11 CSE) + +Firefox 115 and later has made a breaking change internally which makes our longstanding plug-in +implementation fail to operate. This change is expected to be permanent, and as such required a few +items to workaround and fix it: + +- Changes within Endpoint Policy Manager Application Settings Manager on how we register the Firefox + plug in (requiring an updated CSE) +- The way the AppSet performs its interaction with the CSE +- The AppSet itself which needed to be recompiled with some Endpoint Policy Manager DesignStudio + updates. + +:::note +If you are using the Endpoint Policy Manager DesignStudio yourself to make any changes to +the Firefox 23 AppSet, you will need to re-compile with the latest Endpoint Policy Manager +DesignStudio and then perform the steps listed below. +::: + + +This document is to help guide you through the required transition. + +We will refer to the original Firefox AppSet as FF23 AppSet and the updated one as Firefox AppSet as +FF115. + +You can acquire the updated FireFox AppSet 115 in the Endpoint Policy Manager Portal within the +AppSets downloads. + +:::note +It is recommended, though not strictly required that you also update your management +station to the latest Endpoint Policy Manager MMC snap-in. In doing so the screenshots shown here +will match the steps you will be performing. +::: + + +## Functional Matrix of Firefox, CSE and AppSet + +| Firefox ESR version | CSE Version | AppSet Version Compiled with | Expected Behavior | +| ------------------- | --------------- | ----------------------------------- | ----------------- | +| 102.9 and below | 23.8 and below | 23.8 and below (aka FF23 AppSet) | Works | +| 102.9 and below | 23.10 and later | 23.10 and later (aka FF 115 AppSet) | Works | +| 102.9 and below | 23.8 and below | 23.10 and later (aka FF 115 AppSet) | Not Work | +| 115 and later | 23.10 and later | 23.8 and below (aka FF23 AppSet) | Not Work | +| 115 and later | 23.8 and below | 23.10 and later (aka FF 115 AppSet) | Not Work | +| 115 and later | 23.10 and later | 23.10 and later (aka FF23 AppSet) | Works | + +The upshot is: + +- If you use the new CSE you must use the New AppSet (FF115) +- If you use an older CSE you must use the Older AppSet (FF23) +- Then when you use the new CSE and the New AppSet (FF115), Endpoint Policy Manager will operate as + expected for FF ESR version 102.9 and also FF 115 and later + +Additionally, you will want to ensure that your existing FF23 AppSet policies do not get pushed down +to the machines with the new 23.10 and later CSE. During this guide you will use Item Level +Targeting to ensure that the older FF23 AppSet cannot work with, and shouldn't be applied to newer +CSEs; therefore we need to ensure that the newer FF115 AppSet only applies to the newer CSEs. + +:::note +This document mostly focuses on Group Policy Object delivery of the Firefox Endpoint +Policy Manager AppSet. Note you may have other ways to deliver the FireFox Endpoint Policy Manager +AppSet like Endpoint Policy Manager Cloud, local GPOs, and/or XML data files (via MSI files.) Be +sure to perform this same operation using any and all methods. +::: + + +## Finding all GPOs with Endpoint Policy Manager Application Settings Manager Data + +You'll want to first discover all GPOs with Endpoint Policy Manager Application Settings Manager +Data, and those with specific Firefox 23 AppSets. That being said, automation can only help you +discover which GPOs contain Endpoint Policy Manager Application Settings Manager data. After that, +you must open each Group Policy Object one by one and manually look for FF23 AppSet data. + +Overview of using the Endpoint Policy Manager PowerShell cmdlets to discover Endpoint Policy Manager +data within GPOs see the +[Endpoint Policy Manager User PowerShell to find all Endpoint Policy Manager GPOs](/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/powershell.md) +topic for additional information. + +![939_1_image-20231101213809-1_950x372](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_1_image-20231101213809-1_950x372.webp) + +The specific command you'll want to run is Get-PPGPOs -cse "application settings manager". + +Each Group Policy Object at this point will need to be opened to look for Firefox 23 AppSets. Here +is an example of the FF23 AppSet on the Computer side, though it may also reside on the User side. + +![939_2_image-20231101213809-2_950x458](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_2_image-20231101213809-2_950x458.webp) + +Before making any modifications, you'll want to perform a few backup steps which are detailed in the +next section. + +## Backing Up and Testing a Restore + +There are a myriad of ways to recover from a problem during this procedure; and we recommend you +perform all of these steps. + +We strongly recommend before starting the upgrade that you are confident you can backup and also +restore your Endpoint Policy Manager Application Settings Manager and specifically the Firefox +settings before continuing. + +### Back up 1: Viewing the Group Policy Object Report and saving the HTML report. + +![939_3_image-20231101213809-3_950x493](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_3_image-20231101213809-3_950x493.webp) + +This won't be your only backup, but it will express exactly what is in your Group Policy Object with +regards to your settings. + +### Back Up 2: Backing up the Group Policy Object (or all GPOs.) + +For backing up the GPO or all GPOs see the +[Endpoint Policy Manager Application Settings Manager: Backup, Restore, Export, Import](/docs/endpointpolicymanager/gettingstarted/misc/videos/upgradingmaintenance/backup.md) +topic for additional information. + +### Back up 3: Export the settings for each FF23 AppSet you already have. + +Open each FF23 AppSet and locate the Options button. Then click Export XML Settings Data and save +the file out. + +![939_4_image-20231101213809-4_950x761](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_4_image-20231101213809-4_950x761.webp) + +See the +[What are the two ways to export AppSet settings and why would I use one over the other?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/appset.md) + +:::note +You will use the resulting XML file in an upcoming step and not only for backup purposes. +::: + + +### Back up 4: Backing up your Firefox 23 AppSet DLL + +Additionally, you should keep handy the OLD Endpoint Policy Manager Firefox 23 App Set DLL file that +you are currently using; and not merely the one still available in the Endpoint Policy Manager +portal. + +The file you are looking for is PP-Firefox23.DLL which is likely in one of three locations: + +- `\Programfiles\PolicyPak\Extensions` or +- SYSVOL (replicated to other domain controllers)\ + `C:\Windows\SYSVOL\sysvol\fabrikam.com\Policies\PolicyPak ` +- A share. (Tip: To locate the share you could be using see the + [Using Shares to Store Your Paks (Share-Based Storage)](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/shares.md)[Using Shares to Store Your Paks (Share-Based Storage)](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/shares.md)) + +So, in summary, before leaving this section and continuing onward, again we advise that you: + +- Have an HTML report of your existing FF23 settings +- Have a backup of the GPO or GPOs which may potentially need to be restored +- Have your exported FF23 AppSet settings XML as per the instructions +- Have your PP-Firefox23.DLL handy that you are already using + +Remember also you might have more than one Group Policy Object with FF23 settings, so be sure to +repeat this procedure for each discovered Group Policy Object with FF23 settings. + +## Adding Item Level Targeting to your Existing FF 23 AppSet policy entry (and optionally testing the ILT evaluation) + +You want to make sure that that your existing Firefox 23 AppSet policy doesn't affect machines with +the newest CSE. As of this writing the version is 23.10.3683 (October of 2023) but could be +different in your download. + +To play it safe, set the ILT evaluation to check for Endpoint Policy Manager CSE version 23.9.0.0 +(September of 2023) and earlier for FF23 and 23.10.0.0 (October of 2023) and later for FF125. + +However, anything EARLIER than this version will support only FF23 AppSet and anything LATER or +EQUAL to this version will support only FF115 AppSet. + +Find your existing FF23 AppSet in your Group Policy Object(s) and select "Edit item-level targeting +filters…" + +![939_5_image-20231101213809-5_950x524](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_5_image-20231101213809-5_950x524.webp) + +You can test for the presence or absence of Endpoint Policy Manager CSE version 23.09.0.0 with a +Registry match query for: + +- Match type: Match value data +- Value data match type: Version match +- Hive: HKEY_Local_Machine +- Key Path: `SOFTWARE\PolicyPak\ClientSide Extensions\{F8357AE4-F4E0-49EC-AE9D-61078938E7CD}` +- Value Name: Version +- Value Type: REG_SZ +- Version Range: GREATER THAN 0.0.0.0 and LESS THAN 23.9.0.0 + +![939_6_image-20231101213809-6_950x743](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_6_image-20231101213809-6_950x743.webp) + +When done save the values. You will know you have ILT set when you see the Targeting column change +to ON. + +![939_7_image-20231101213809-7_950x273](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_7_image-20231101213809-7_950x273.webp) + +This is different than "Predefined Targeting". To understand the difference between ILT and +Predefined Targeting see the +[Predefined ILTs (Internal Filters)](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/designstudio/itemleveltargeting.md) +topic for additional information. + +### Optional: Testing the ILT Filters on FF23 using the Endpoint Policy Manager Item Level Targeting Validation Tool + +Tip: You can also export the FF 23 settings to XMLdata File format and use part of the output to +verify the Item Level Targeting will evaluate to TRUE or FALSE. To do this, right-click the entry +and select Export settings to XMLData file and save the file. Then use the Endpoint Policy Manager +Item Level Targeting Validation tool to test how ILT will operate. See the +[Troubleshooting ILT with the ILT Validator Tool](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/featurestechsupport/itemleveltargeting.md) +topic for additional information. + +:::note +You will have to trim the ILT part of the output to eliminate the `` at the +beginning and `` at the end. +::: + + +![939_8_image-20231101213809-8_950x453](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_8_image-20231101213809-8_950x453.webp) + +Expected result on a machine with 23.10 and later CSE: + +![939_9_image-20231101213809-9_950x523](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_9_image-20231101213809-9_950x523.webp) + +## Adding the FF 115 AppSet to an existing or new Group Policy Object + +After you download the FF 115 AppSet from the Endpoint Policy Manager portal, it will appear like +this. You only need the .DLL file and not the XML file. + +![939_10_image-20231101213809-10](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_10_image-20231101213809-10.webp) + +Use these instructions to add the AppSet Locally or via Central Store: + +[Working with Others and using the Central Store](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/centralstorework.md) + +Use these instructions to add the AppSet to a Share: + +[Using Shares to Store Your Paks (Share-Based Storage)](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/shares.md) + +![939_11_image-20231101213809-11_950x492](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_11_image-20231101213809-11_950x492.webp) + +For example in the Endpoint Policy Manager Central Store you simply add the pp-Mozilla Firefox +115.DLL. + +:::note +You may leave your existing pp-Mozilla Firefox 23 aboutconfig A to I and J to Z.DLL files +in place without modification. +::: + + +![939_12_image-20231101213809-12_950x406](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_12_image-20231101213809-12_950x406.webp) + +Next time you open the Group Policy editor you should see Endpoint Policy Manager For Mozilla +Firefox 115. + +## Using the FF 115 AppSet + +Now you can create a new entry for the FF 115 AppSet, import the previously exported FF23 settings +into the FF115 AppSet and also set Item Level Targeting on the FF 115 AppSet so it only applies to +computers with the latest Endpoint Policy Manager CSE. + +After creating the entry, double-click into it to open it up and select Import XML Settings Data. + +![939_13_image-20231101213809-13_950x633](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_13_image-20231101213809-13_950x633.webp) + +Then select the previously exported settings from the FF 23 AppSet. You should get a SUCCESS +message. + +Next, set the Item-level targeting in the AppSet. + +![939_14_image-20231101213809-14](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_14_image-20231101213809-14.webp) + +FF AppSet 115 should be applied only to machines with Endpoint Policy Manager CSE version 23.10.3687 +or Greater and can be determined with a Registry match query for: + +- Match type: Match value data +- Value data match type: Version match +- Hive: HKEY_Local_Machine +- Key Path: `SOFTWARE\PolicyPak\ClientSide Extensions\{F8357AE4-F4E0-49EC-AE9D-61078938E7CD}` +- Value Name: Version +- Value Type: REG_SZ +- Version Range: GREATER THAN OR EQUAL TO 23.10.0.0 and LESS THAN 99.0.0.0 + +![939_15_image-20231101213809-15_950x815](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_15_image-20231101213809-15_950x815.webp) + +Click OK and then close the AppSet entry to save it. + +### Optional: Testing the ILT Filters on FF23 using the Endpoint Policy Manager Item Level Targeting Validation Tool + +You can also export the FF 115 settings to XMLdata File format and use part of the output to verify +the Item Level Targeting will evaluate to TRUE or FALSE. To do this, right-click the entry and +select Export settings to XMLData file and save the file. Then use the Endpoint Policy Manager Item +Level Targeting Validation tool to test how ILT will operate. See the +[Troubleshooting ILT with the ILT Validator Tool](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/featurestechsupport/itemleveltargeting.md) +topic for additional information. + +Note that you will have to trim the ILT part of the output to eliminate the `` at the +beginning and `` at the end. + +You can test the ILT evaluation by using the Export settings to XMLData file for the Mozilla Firefox +115 entry. + +![939_16_image-20231101213809-16_950x543](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_16_image-20231101213809-16_950x543.webp) + +Then you can use the ILT Evaluator tool to ensure your ILT evaluation is properly crafted and the +AppSet will only target machines with the latest Endpoint Policy Manager CSE. + +![939_17_image-20231101213809-17_950x549](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_17_image-20231101213809-17_950x549.webp) + +# HTML Settings Report Manual Comparison + +In one of the backup steps we recommended you export the FF23 GPMC HTML report. At this point you +may also want to double-check the FF115 GPMC report for any discrepancies or omissions in the +export/import process. + +If you don't see an expected value this could be because (1) the FF115 Pak was updated to remove +some values which appear to be unsupported in modern Firefox versions or (2) Some part of the Export +from FF23 and import to FF115 didn't work as expected. + +In such a case as case 2, please manually open the FF115 Pak and manually update your settings to +correct for any non-imported settings. + +![939_18_image-20231101213809-18_950x807](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_18_image-20231101213809-18_950x807.webp) + +## Final Thoughts + +In this document you learned how to target the FF23 AppSet to your older CSEs and the FF115 AppSet +to your newer CSEs. You also learned how to export the FF23 settings and migrate them over to the +FF115 AppSet. diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/unavailable.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/unavailable.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/unavailable.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/unavailable.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/updates.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/updates.md similarity index 90% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/updates.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/updates.md index 84fbca4401..f6ac522d8d 100644 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/updates.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/updates.md @@ -12,7 +12,7 @@ needed. We typically update Java and Firefox and Internet Explorer right away as Most of the time, AppSets doesn't need any updates at all, even if the application's version number changes -[AppSets: How will I know that an existing AppSet will work with the version of the application I have today (and tomorrow)?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/versionsupport.md) +[AppSets: How will I know that an existing AppSet will work with the version of the application I have today (and tomorrow)?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/versionsupport.md) Other times, an AppSet does need to be updated or fully re-made depending on the app (rare). diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/useraccountcontrol.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/useraccountcontrol.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/useraccountcontrol.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/useraccountcontrol.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/version.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/version.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/version.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/version.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/versioninsecure.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/versioninsecure.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/versioninsecure.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/versioninsecure.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/versionoutofdate.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/versionoutofdate.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/versionoutofdate.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/versionoutofdate.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/versions.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/versions.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/versions.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/versions.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/versionsupport.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/versionsupport.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/versionsupport.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/versionsupport.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/_category_.json new file mode 100644 index 0000000000..f89ae4f92b --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Troubleshooting", + "position": 60, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/applicationissue.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/applicationissue.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/applicationissue.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/applicationissue.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/appset.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/appset.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/appset.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/appset.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/basicsteps.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/basicsteps.md similarity index 98% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/basicsteps.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/basicsteps.md index 3a39865769..2195dada04 100644 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/basicsteps.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/basicsteps.md @@ -61,7 +61,7 @@ Remember: Most pre-configured Paks ship with Pre-Defined Item Level Targeting. - This means the Pak is designed to only affect a specific version of the application. - You can bypass Internal Item Level Targeting in the Pak. - Refer to the following video - [Bypassing Internal Item Level Targeting Filters](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/itemleveltargetingbypass.md) + [Bypassing Internal Item Level Targeting Filters](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/featurestechsupport/itemleveltargetingbypass.md) to see how to bypass Internal Item Level Targeting. **Step 8 –** Did you use BLOCK INHERITENCE to block the Licensing GPO or block the GPO which is diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/code0xc000428.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/code0xc000428.md similarity index 93% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/code0xc000428.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/code0xc000428.md index ae35e962d1..2c5898d0e8 100644 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/code0xc000428.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/code0xc000428.md @@ -40,7 +40,7 @@ Endpoint Policy Manager AppLock is NOT related to Microsoft AppLocker. Here is the Endpoint Policy Manager side workaround if you are encountering this error: -[How do I turn AppLock off or on based upon the CSE version I'm using?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/disable.md) +[How do I turn AppLock off or on based upon the CSE version I'm using?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/disable.md) :::note IIn general it is NOT recommended to stop Endpoint Policy Manager AppLock. @@ -75,4 +75,4 @@ error. Optional: FoFor Workaround 2 you can use Endpoint Policy ManagerScripts Manager to apply these settings to multiple computers/users via PowerShell, for steps please see the KB below: -[How to use Scripts Manager to workaround the "PPAppLockdr64.dll is either not designed to run on Windows or it contains an error" message when running Microsoft Remote Assistance (MSRA.exe) and the Endpoint Policy Manager CSE is installed on Windows 10 1903](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/microsoftremoteassistance.md) +[How to use Scripts Manager to workaround the "PPAppLockdr64.dll is either not designed to run on Windows or it contains an error" message when running Microsoft Remote Assistance (MSRA.exe) and the Endpoint Policy Manager CSE is installed on Windows 10 1903](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/microsoftremoteassistance.md) diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/disable.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/disable.md similarity index 92% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/disable.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/disable.md index 623336a234..b8a0735ded 100644 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/disable.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/disable.md @@ -20,8 +20,8 @@ UI hiding operation. You can learn more about AppLock at: -- [AppLock™ Modes](/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/modes/applock.md) -- [The Superpowers](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/superpowers.md) +- [AppLock™ Modes](/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/modes/applock.md) +- [The Superpowers](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/featurestechsupport/superpowers.md) It is generally advised to turn off AppLock if you are not using this feature as it can interfere with security software you might have on your endpoints. @@ -54,7 +54,7 @@ gone through a rename and a state change. Before continuing, please get familiar with how to use the Endpoint Policy Manager ADMX settings and also how to update them: -[Troubleshooting with ADMX files](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/admxfiles.md) +[Troubleshooting with ADMX files](/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/admxfiles.md) If you're using an older set of ADMX settings, you will find a setting named "Disable Endpoint Policy Manager AppLock" (which exists on both User and Computer Side): diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/forcepoint.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/forcepoint.md similarity index 92% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/forcepoint.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/forcepoint.md index 9ca2a07ee6..6498d238ea 100644 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/forcepoint.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/forcepoint.md @@ -38,4 +38,4 @@ Block all applications from performing settings re-application using ADMX This method causes a universal block to Reapply of application settings. You can try this method if the first method doesn't operate as expected. -[How do I turn off "Reapply on Launch" for all applications if asked by tech support?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/reapplylaunchdisable.md) +[How do I turn off "Reapply on Launch" for all applications if asked by tech support?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/reapplylaunchdisable.md) diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/gpmc.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/gpmc.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/gpmc.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/gpmc.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/localmissing.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/localmissing.md similarity index 93% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/localmissing.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/localmissing.md index b38e00c9ce..89f0b9a20a 100644 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/localmissing.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/localmissing.md @@ -39,7 +39,7 @@ back after the upgrade CENTRAL STORE or SHARED STORE method. **Step 3 –** -[How can I use the Endpoint Policy ManagerCentral store (if I was already using the Endpoint Policy Manager Local store?)](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/centralstore.md). +[How can I use the Endpoint Policy ManagerCentral store (if I was already using the Endpoint Policy Manager Local store?)](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/generalconfiguration/centralstore.md). This issue is fixed for any upgrade FROM 785 onwards, but it's not possible to fix "retroactively" as you upgrade to 785. diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/microsoftdefender.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/microsoftdefender.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/microsoftdefender.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/microsoftdefender.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/microsoftremoteassistance.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/microsoftremoteassistance.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/microsoftremoteassistance.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/microsoftremoteassistance.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/mmc.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/mmc.md similarity index 96% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/mmc.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/mmc.md index 7d3dd90350..b7c2835f6d 100644 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/mmc.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/mmc.md @@ -22,7 +22,7 @@ the installation process. Although there were no explicit indications of such du Resolution: Perform and confirm the steps as outlined in the following KB: -[How must I configure my Anti-virus or system-level software to work with Endpoint Policy Manager CSE?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/antivirussystemsoftware/antivirus.md) +[How must I configure my Anti-virus or system-level software to work with Endpoint Policy Manager CSE?](/docs/endpointpolicymanager/upgrademaintenance/antivirussystemsoftware/antivirus.md) If the issue persists, proceed with the following troubleshooting steps. diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/other.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/other.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/other.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/other.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/reapplylaunch.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/reapplylaunch.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/reapplylaunch.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/reapplylaunch.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/reapplylaunchdisable.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/reapplylaunchdisable.md similarity index 85% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/reapplylaunchdisable.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/reapplylaunchdisable.md index 24e2aeef11..8e7a2aa91a 100644 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/reapplylaunchdisable.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/reapplylaunchdisable.md @@ -8,7 +8,7 @@ sidebar_position: 170 First, install the Netwrix Endpoint Policy Manager (formerly PolicyPak) ADMX files as seen here: -[Troubleshooting with ADMX files](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/admxfiles.md) +[Troubleshooting with ADMX files](/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/admxfiles.md) Then use the following Computer side Group Policy setting to "Disable Reapply on Launch for all applications." diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/redirectedfolder.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/redirectedfolder.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/redirectedfolder.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/redirectedfolder.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/removeclientsideextension.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/removeclientsideextension.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/removeclientsideextension.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/removeclientsideextension.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/replication.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/replication.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/replication.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/replication.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/reports.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/reports.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/reports.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/reports.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/settings.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/settings.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/settings.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/settings.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/someapplications.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/someapplications.md similarity index 97% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/someapplications.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/someapplications.md index 0b61a7d5ee..83d8dd44ab 100644 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/someapplications.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/someapplications.md @@ -66,7 +66,7 @@ using ACL Lockdown. Video: -[ACL Lockdown for Registry Based Applications](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/acllockdown.md) +[ACL Lockdown for Registry Based Applications](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/featurestechsupport/acllockdown.md) If you do this, it should prevent users from working around the item, even if the AppLock doesn't work. diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/storage.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/storage.md similarity index 88% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/storage.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/storage.md index 82bf242d2e..95121bc44a 100644 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/storage.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/storage.md @@ -15,4 +15,4 @@ Here's the rule of thumb: Here's a video on how to do that (using Netwrix Endpoint Policy Manager (formerly PolicyPak) Application Manager) -[Using Shares to Store Your Paks (Share-Based Storage)](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/shares.md) +[Using Shares to Store Your Paks (Share-Based Storage)](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/shares.md) diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/symantecendpointprotection.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/symantecendpointprotection.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/symantecendpointprotection.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/troubleshooting/symantecendpointprotection.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/virtualizedapplications/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/virtualizedapplications/_category_.json new file mode 100644 index 0000000000..7ad54c8bae --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/virtualizedapplications/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Virtualized Applications", + "position": 40, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/virtualizedapplications/applicationvirtualization.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/virtualizedapplications/applicationvirtualization.md similarity index 80% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/virtualizedapplications/applicationvirtualization.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/virtualizedapplications/applicationvirtualization.md index 71871d96a2..f802d23cf6 100644 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/virtualizedapplications/applicationvirtualization.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/virtualizedapplications/applicationvirtualization.md @@ -11,4 +11,4 @@ Virtualization, Spoon.Net, and Symantec Workspace Virtualization are all support Endpoint Policy Manager (formerly PolicyPak). To see videos on these solutions watch go to Application Manager > -[Video Learning Center](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/videolearningcenter.md). +[Video Learning Center](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/videolearningcenter.md). diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/virtualizedapplications/appvsequences.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/virtualizedapplications/appvsequences.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/virtualizedapplications/appvsequences.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/virtualizedapplications/appvsequences.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/virtualizedapplications/exception.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/virtualizedapplications/exception.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/virtualizedapplications/exception.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/virtualizedapplications/exception.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/virtualizedapplications/thinapp.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/virtualizedapplications/thinapp.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/virtualizedapplications/thinapp.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/virtualizedapplications/thinapp.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/virtualizedapplications/xenapp.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/virtualizedapplications/xenapp.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/virtualizedapplications/xenapp.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/virtualizedapplications/xenapp.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/virtualizedapplications/xenapp_1.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/virtualizedapplications/xenapp_1.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/virtualizedapplications/xenapp_1.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/virtualizedapplications/xenapp_1.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/_category_.json new file mode 100644 index 0000000000..12b644b19b --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Videos", + "position": 2, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "videolearningcenter" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/_category_.json new file mode 100644 index 0000000000..2348ef42e0 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Central Store And Sharing", + "position": 30, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/centralstorework.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/centralstorework.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/centralstorework.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/centralstorework.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/dllorphans.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/dllorphans.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/dllorphans.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/dllorphans.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/dllreconnect.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/dllreconnect.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/dllreconnect.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/dllreconnect.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/manualupdate.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/manualupdate.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/manualupdate.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/manualupdate.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/shares.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/shares.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/shares.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/shares.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/touchutility.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/touchutility.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/touchutility.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/touchutility.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/trustedappsets.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/trustedappsets.md similarity index 80% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/trustedappsets.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/trustedappsets.md index d1f4d0a244..06c7074a89 100644 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/trustedappsets.md +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/trustedappsets.md @@ -16,7 +16,7 @@ Before heading down this path please watch the backup / restore videos: ::: -- [Endpoint Policy Manager Application Settings Manager: Backup, Restore, Export, Import](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/upgradingmaintenance/backup.md) -- [Endpoint Policy Manager: Backup and Restore Options to Recover from nearly any problem](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/upgradingmaintenance/backupoptions.md) +- [Endpoint Policy Manager Application Settings Manager: Backup, Restore, Export, Import](/docs/endpointpolicymanager/gettingstarted/misc/videos/upgradingmaintenance/backup.md) +- [Endpoint Policy Manager: Backup and Restore Options to Recover from nearly any problem](/docs/endpointpolicymanager/gettingstarted/misc/videos/upgradingmaintenance/backupoptions.md) diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/uptodate.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/uptodate.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/uptodate.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/uptodate.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/chrome/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/chrome/_category_.json new file mode 100644 index 0000000000..eedad9b47d --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/chrome/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Chrome All Videos", + "position": 130, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/chrome/bookmarks.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/chrome/bookmarks.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/chrome/bookmarks.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/chrome/bookmarks.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/chrome/clearbrowsing.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/chrome/clearbrowsing.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/chrome/clearbrowsing.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/chrome/clearbrowsing.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/chrome/gettingstarted.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/chrome/gettingstarted.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/chrome/gettingstarted.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/chrome/gettingstarted.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/citrix/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/citrix/_category_.json new file mode 100644 index 0000000000..96e9670575 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/citrix/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Citrix And Terminal Servers", + "position": 70, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/citrix/demo.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/citrix/demo.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/citrix/demo.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/citrix/demo.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/citrix/demo2.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/citrix/demo2.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/citrix/demo2.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/citrix/demo2.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/citrix/integration.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/citrix/integration.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/citrix/integration.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/citrix/integration.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/citrix/rds.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/citrix/rds.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/citrix/rds.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/citrix/rds.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/citrix/sealapproval.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/citrix/sealapproval.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/citrix/sealapproval.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/citrix/sealapproval.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/citrix/xenapp.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/citrix/xenapp.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/citrix/xenapp.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/citrix/xenapp.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/citrix/xendesktop.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/citrix/xendesktop.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/citrix/xendesktop.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/citrix/xendesktop.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/designstudio/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/designstudio/_category_.json new file mode 100644 index 0000000000..e96548a30e --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/designstudio/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "DesignStudio How To", + "position": 60, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/designstudio/addelements.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/designstudio/addelements.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/designstudio/addelements.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/designstudio/addelements.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/designstudio/designstudiojava.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/designstudio/designstudiojava.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/designstudio/designstudiojava.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/designstudio/designstudiojava.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/designstudio/firefox_plugins.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/designstudio/firefox_plugins.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/designstudio/firefox_plugins.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/designstudio/firefox_plugins.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/designstudio/firstpak.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/designstudio/firstpak.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/designstudio/firstpak.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/designstudio/firstpak.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/designstudio/foxitprinter.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/designstudio/foxitprinter.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/designstudio/foxitprinter.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/designstudio/foxitprinter.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/designstudio/importregistry.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/designstudio/importregistry.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/designstudio/importregistry.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/designstudio/importregistry.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/designstudio/itemleveltargeting.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/designstudio/itemleveltargeting.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/designstudio/itemleveltargeting.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/designstudio/itemleveltargeting.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/featurestechsupport/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/featurestechsupport/_category_.json new file mode 100644 index 0000000000..aab8067670 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/featurestechsupport/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Features Tech Support And How To", + "position": 40, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/acllockdown.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/featurestechsupport/acllockdown.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/acllockdown.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/featurestechsupport/acllockdown.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/applicationlaunch.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/featurestechsupport/applicationlaunch.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/applicationlaunch.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/featurestechsupport/applicationlaunch.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/itemleveltargeting.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/featurestechsupport/itemleveltargeting.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/itemleveltargeting.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/featurestechsupport/itemleveltargeting.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/itemleveltargetingbypass.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/featurestechsupport/itemleveltargetingbypass.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/itemleveltargetingbypass.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/featurestechsupport/itemleveltargetingbypass.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/proxysettings.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/featurestechsupport/proxysettings.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/proxysettings.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/featurestechsupport/proxysettings.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/superpowers.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/featurestechsupport/superpowers.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/superpowers.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/featurestechsupport/superpowers.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/variables.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/featurestechsupport/variables.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/variables.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/featurestechsupport/variables.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/_category_.json new file mode 100644 index 0000000000..f1063d4d15 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Firefox All Videos", + "position": 140, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/addons.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/addons.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/addons.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/addons.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/adobe.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/adobe.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/adobe.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/adobe.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/bookmarks.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/bookmarks.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/bookmarks.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/bookmarks.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/bookmarksmodify.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/bookmarksmodify.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/bookmarksmodify.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/bookmarksmodify.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/certificates.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/certificates.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/certificates.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/certificates.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/defaultsearch.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/defaultsearch.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/defaultsearch.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/defaultsearch.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/disable.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/disable.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/disable.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/disable.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/extensions.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/extensions.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/extensions.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/extensions.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/extratabs.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/extratabs.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/extratabs.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/extratabs.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/gettingstarted.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/gettingstarted.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/gettingstarted.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/gettingstarted.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/miscsettings.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/miscsettings.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/miscsettings.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/miscsettings.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/popups.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/popups.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/popups.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/popups.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/removeelements.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/removeelements.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/removeelements.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/removeelements.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/gettingstarted/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/gettingstarted/_category_.json new file mode 100644 index 0000000000..a4fd673330 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/gettingstarted/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Getting Started", + "position": 20, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/gettingstarted/centralstorecreate.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/gettingstarted/centralstorecreate.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/gettingstarted/centralstorecreate.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/gettingstarted/centralstorecreate.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/gettingstarted/centralstoreupdate.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/gettingstarted/centralstoreupdate.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/gettingstarted/centralstoreupdate.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/gettingstarted/centralstoreupdate.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/gettingstarted/quickrundown.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/gettingstarted/quickrundown.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/gettingstarted/quickrundown.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/gettingstarted/quickrundown.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/_category_.json new file mode 100644 index 0000000000..6faa97c4d7 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Internet Explorer All Videos", + "position": 120, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/certificates.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/certificates.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/certificates.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/certificates.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/connectionstab.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/connectionstab.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/connectionstab.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/connectionstab.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/contenttab.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/contenttab.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/contenttab.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/contenttab.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/favorites.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/favorites.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/favorites.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/favorites.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/generaltab.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/generaltab.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/generaltab.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/generaltab.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/gettingstarted.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/gettingstarted.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/gettingstarted.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/gettingstarted.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/privacytab.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/privacytab.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/privacytab.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/privacytab.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/programstab.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/programstab.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/programstab.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/programstab.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/securitytab.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/securitytab.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/securitytab.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/securitytab.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/settings.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/settings.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/settings.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/settings.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/java/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/java/_category_.json new file mode 100644 index 0000000000..cec6bc3736 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/java/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Java All Videos", + "position": 150, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/java/disable.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/java/disable.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/java/disable.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/java/disable.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/java/jre.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/java/jre.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/java/jre.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/java/jre.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/java/lockdown.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/java/lockdown.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/java/lockdown.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/java/lockdown.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/java/securityslider.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/java/securityslider.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/java/securityslider.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/java/securityslider.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/methods/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/methods/_category_.json new file mode 100644 index 0000000000..5e8cbc6ab8 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/methods/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Methods Cloud MDM SCCM PDQ", + "position": 80, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/methods/microsoftintune.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/methods/microsoftintune.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/methods/microsoftintune.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/methods/microsoftintune.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/methods/pdqdeploy.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/methods/pdqdeploy.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/methods/pdqdeploy.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/methods/pdqdeploy.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/methods/pdqdeployfirefox.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/methods/pdqdeployfirefox.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/methods/pdqdeployfirefox.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/methods/pdqdeployfirefox.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/methods/sccmsoftwarecenter.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/methods/sccmsoftwarecenter.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/methods/sccmsoftwarecenter.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/methods/sccmsoftwarecenter.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/methods/specops.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/methods/specops.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/methods/specops.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/methods/specops.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/otherapplications/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/otherapplications/_category_.json new file mode 100644 index 0000000000..957db5b6b0 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/otherapplications/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Other Applications All Videos", + "position": 160, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/otherapplications/acrobat.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/otherapplications/acrobat.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/otherapplications/acrobat.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/otherapplications/acrobat.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/otherapplications/flashplayer.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/otherapplications/flashplayer.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/otherapplications/flashplayer.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/otherapplications/flashplayer.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/otherapplications/irfanview.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/otherapplications/irfanview.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/otherapplications/irfanview.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/otherapplications/irfanview.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/otherapplications/office.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/otherapplications/office.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/otherapplications/office.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/otherapplications/office.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/otherapplications/passwordsecure.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/otherapplications/passwordsecure.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/otherapplications/passwordsecure.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/otherapplications/passwordsecure.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/otherapplications/skype.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/otherapplications/skype.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/otherapplications/skype.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/otherapplications/skype.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/otherapplications/teams.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/otherapplications/teams.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/otherapplications/teams.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/otherapplications/teams.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/otherapplications/thunderbird.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/otherapplications/thunderbird.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/otherapplications/thunderbird.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/otherapplications/thunderbird.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/tipsandtricks/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/tipsandtricks/_category_.json new file mode 100644 index 0000000000..b4fa2df0fb --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/tipsandtricks/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Misc Tips And Tricks", + "position": 50, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/tipsandtricks/certificatesevil.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/tipsandtricks/certificatesevil.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/tipsandtricks/certificatesevil.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/tipsandtricks/certificatesevil.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/tipsandtricks/chromebookmarks.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/tipsandtricks/chromebookmarks.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/tipsandtricks/chromebookmarks.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/tipsandtricks/chromebookmarks.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/tipsandtricks/chromerevert.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/tipsandtricks/chromerevert.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/tipsandtricks/chromerevert.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/tipsandtricks/chromerevert.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/tipsandtricks/chromerevertfix.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/tipsandtricks/chromerevertfix.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/tipsandtricks/chromerevertfix.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/tipsandtricks/chromerevertfix.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/tipsandtricks/firefoxabout.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/tipsandtricks/firefoxabout.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/tipsandtricks/firefoxabout.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/tipsandtricks/firefoxabout.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/tipsandtricks/firefoxplugins.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/tipsandtricks/firefoxplugins.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/tipsandtricks/firefoxplugins.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/tipsandtricks/firefoxplugins.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/tipsandtricks/ieproxyserver.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/tipsandtricks/ieproxyserver.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/tipsandtricks/ieproxyserver.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/tipsandtricks/ieproxyserver.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/tipsandtricks/invincea.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/tipsandtricks/invincea.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/tipsandtricks/invincea.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/tipsandtricks/invincea.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/tipsandtricks/oraclejava.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/tipsandtricks/oraclejava.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/tipsandtricks/oraclejava.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/tipsandtricks/oraclejava.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/tipsandtricks/paksbig.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/tipsandtricks/paksbig.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/tipsandtricks/paksbig.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/tipsandtricks/paksbig.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/troubleshooting/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/troubleshooting/_category_.json new file mode 100644 index 0000000000..5ae4feb2a8 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/troubleshooting/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Troubleshooting", + "position": 110, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/troubleshooting/chrome.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/troubleshooting/chrome.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/troubleshooting/chrome.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/troubleshooting/chrome.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/vdi/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/vdi/_category_.json new file mode 100644 index 0000000000..37e24a5b65 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/vdi/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "VDI", + "position": 90, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/vdi/dedicated.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/vdi/dedicated.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/vdi/dedicated.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/vdi/dedicated.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/vdi/integration.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/vdi/integration.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/vdi/integration.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/vdi/integration.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/vdi/localmode.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/vdi/localmode.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/vdi/localmode.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/vdi/localmode.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/vdi/thinapp.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/vdi/thinapp.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/vdi/thinapp.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/vdi/thinapp.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/vdi/thinappworkspace.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/vdi/thinappworkspace.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/vdi/thinappworkspace.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/vdi/thinappworkspace.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/vdi/vmware.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/vdi/vmware.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/vdi/vmware.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/vdi/vmware.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/videolearningcenter.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/videolearningcenter.md new file mode 100644 index 0000000000..d2257cd2ca --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/videolearningcenter.md @@ -0,0 +1,160 @@ +--- +title: "Video Learning Center" +description: "Video Learning Center" +sidebar_position: 20 +--- + +# Video Learning Center + +See the following Video topics for Application Manager. + +## What does it do (and Why You Need It) + +- [Endpoint Policy Manager Overview Video for Managers](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/whatdoesitdo/managers.md) +- [Endpoint Policy Application Manager Overview](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/whatdoesitdo/pak.md) +- [Endpoint Policy ManagerOn-Premise QuickStart for Endpoint Policy Application Manager](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/whatdoesitdo/onpremise.md) +- [Managing Application Settings on your MDM enrolled machines](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/whatdoesitdo/mdm.md) +- [What is Endpoint Policy Application Manager (Group Policy Edition)](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/whatdoesitdo/grouppolicy.md) +- [What is Endpoint Policy Application Manager (Cloud Edition)](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/whatdoesitdo/cloud.md) + +## Getting Started + +- [Creating the Central Store for Group Policy andEndpoint Policy Manager ](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/gettingstarted/centralstorecreate.md) +- [Updating Endpoint Policy Manager Central Store](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/gettingstarted/centralstoreupdate.md) +- [PPGP Quick Rundown: Application Manager](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/gettingstarted/quickrundown.md) + +## Central Store and Sharing + +- [How to manually update Paks](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/manualupdate.md) +- [Working with Others and using the Central Store](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/centralstorework.md) +- [Using Shares to Store Your Paks (Share-Based Storage)](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/shares.md) +- [Keeping Application Settings Manager and Paks up to date](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/uptodate.md) +- [Understanding and fixing Endpoint Policy Manager DLL Orphans](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/dllorphans.md) +- [Reconnecting DLLs](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/dllreconnect.md) +- [GPOTouch Utility](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/touchutility.md) + +## Features, Tech Support and How-To + +- [Using Item Level Targeting](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/featurestechsupport/itemleveltargeting.md) +- [Bypassing Internal Item Level Targeting Filters](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/featurestechsupport/itemleveltargetingbypass.md) +- [ACL Lockdown for Registry Based Applications](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/featurestechsupport/acllockdown.md) +- [Re-Deploy Settings at application launch](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/featurestechsupport/applicationlaunch.md) +- [The Superpowers](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/featurestechsupport/superpowers.md) +- [Using Environment Variables in Paks](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/featurestechsupport/variables.md) +- [Manage different proxy settings, even when offline](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/featurestechsupport/proxysettings.md) +- [Endpoint Policy Manager Application Setting Manager (Understanding Trusted AppSets)](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/trustedappsets.md) + +## Misc Tips and Tricks + +- [Managing IE Proxy server with Advanced settings](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/tipsandtricks/ieproxyserver.md) +- [Wipe Privdog (and other evil certificates) off your network using Group Policy and Endpoint Policy Manager.](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/tipsandtricks/certificatesevil.md) +- [Endpoint Policy Manager and Invincea Integration Demo](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/tipsandtricks/invincea.md) +- [Manage Firefox Plug-ins Per Website](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/tipsandtricks/firefoxplugins.md) +- [Chrome Revert Tips (Pre-CSE 1260)](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/tipsandtricks/chromerevert.md) +- [Fix Chrome Revert with PP CSE 1260 or later](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/tipsandtricks/chromerevertfix.md) +- [Transitioning to the Universal Oracle Java AppSet (7 thru 9)](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/tipsandtricks/oraclejava.md) +- [PPAM: Convert from 2 to 4 AppSet for Firefox About:Config AppSet](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/tipsandtricks/firefoxabout.md) +- [Deliver pre-configured Bookmarks in Chrome](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/tipsandtricks/chromebookmarks.md) +- [Endpoint Policy Manager App Settings Manager: Finding items in big Paks](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/tipsandtricks/paksbig.md) + +## DesignStudio How-To + +- [Creating Your First Pak using Endpoint Policy Manager Design Studio](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/designstudio/firstpak.md) +- [Use the DesignStudio to import existing registry keys](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/designstudio/importregistry.md) +- [Using DesignStudio to add elements from an alternate UI](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/designstudio/addelements.md) +- [Predefined ILTs (Internal Filters)](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/designstudio/itemleveltargeting.md) +- [Design Studio – FoxIT Printer Settings Tutorial](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/designstudio/foxitprinter.md) +- [Manage Firefox Plug-ins using Endpoint Policy Managerand the Endpoint Policy Manager DesignStudio](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/designstudio/firefox_plugins.md) + +## Citrix & Terminal Servers + +- [Endpoint Policy Manager and Citrix: Webster Seal of Approval](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/citrix/sealapproval.md) +- [Endpoint Policy Manager and Citrix: Better Together.. A quick introduction!](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/citrix/integration.md) +- [Endpoint Policy Manager on Citrix: You Gotta Try This](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/citrix/demo.md) +- [CUGC Connect Endpoint Policy Manager + Citrix Demo You Gotta Try This!](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/citrix/demo2.md) +- [Endpoint Policy Manager enhances XenApp with Group Policy](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/citrix/xenapp.md) +- [Endpoint Policy Manager & Citrix XenDesktop](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/citrix/xendesktop.md) +- [Endpoint Policy Manager and Microsoft RDS and RemoteApp – Better Together to Manage Applications' settings](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/citrix/rds.md) + +## Methods (Cloud, MDM, SCCM, PDQ) + +- [Perform Desktop Lockdown using Microsoft Intune](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/methods/microsoftintune.md) +- [Perform Desktop Lockdown using Microsoft SCCM and Endpoint Policy Manager ](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/methods/sccmsoftwarecenter.md) +- [Endpoint Policy Manager Integrates with Specops Deploy](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/methods/specops.md) +- [Deploy and Manage WinZip with PDQ Deploy and Endpoint Policy Manager ](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/methods/pdqdeploy.md) +- [Deploy and Manage Firefox with PDQ Deploy and Endpoint Policy Manager ](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/methods/pdqdeployfirefox.md) + +## VDI + +- [Endpoint Policy Manager and Microsoft VDI – Better Together to Manage Applications' settings](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/vdi/integration.md) +- [Endpoint Policy Manager and VMWare Horizon View](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/vdi/vmware.md) +- [Endpoint Policy Manager and VMware Horizon View – Dedicated VDI](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/vdi/dedicated.md) +- [Endpoint Policy Manager and VMware Horizon View – Local Mode VDI](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/vdi/localmode.md) +- [Endpoint Policy Manager and VMware Horizon View with ThinApp Assigned Packages](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/vdi/thinapp.md) +- [Endpoint Policy Manager and VMware Horizon Workspace Applications and ThinApp Entitled Packages](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/vdi/thinappworkspace.md) + +## Application Virtualization + +- [Endpoint Policy Manager extends Group Policy to Microsoft App-V](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/virtualization/appv.md) +- [Endpoint Policy Manager & Citrix XenApp](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/virtualization/xenapp.md) +- [Microsoft User Experience Virtualization (UE-V) enhanced by Endpoint Policy Manager ](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/virtualization/uev.md) +- [Manage ThinApp Packages on Physical or VDI machines using Endpoint Policy Manager ](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/virtualization/thinapp.md) +- [Endpoint Policy Manager & Symantec](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/virtualization/symantec.md) +- [Endpoint Policy Manager extends Group Policy to Spoon / Novell ZENworks App Virtualization](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/virtualization/spoonnovell.md) + +## Troubleshooting + +- [Endpoint Policy Manager and "Chrome Incompatible apps"](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/troubleshooting/chrome.md) + +## Internet Explorer (all videos) + +- [Getting Started Managing Internet Explorer](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/gettingstarted.md) +- [Manage IE Certificates](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/certificates.md) +- [Manage IE Connections tab](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/connectionstab.md) +- [Manage IE Content tab](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/contenttab.md) +- [Manage IE General tab](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/generaltab.md) +- [Manage IE Privacy tab](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/privacytab.md) +- [Manage IE Programs Tab](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/programstab.md) +- [Manage Internet Explorer Security tab](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/securitytab.md) +- [Manage Internet Explorer Settings With Endpoint Policy Manager Application Settings Manager](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/settings.md) +- [Managing Favorites in IE](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/favorites.md) + +## Chrome (all videos) + +- [Manage Google Chrome using Group Policy, SCCM or your own management utility](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/chrome/gettingstarted.md) +- [Google Chrome: Clear Browsing History, Cookies, Password, Images and more](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/chrome/clearbrowsing.md) +- [Manage Google Chrome Bookmarks](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/chrome/bookmarks.md) + +## Firefox (all videos) + +- [Manage Firefox using Group Policy, SCCM, or your own management tool](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/gettingstarted.md) +- [Changing the Firefox Default Search Engine in one-click](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/defaultsearch.md) +- [Manage Firefox Pop-Ups and Permissions using Group Policy](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/popups.md) +- [Force Install Firefox Extensions (from URL or file).](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/extensions.md) +- [Manage Firefox Bookmarks](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/bookmarks.md) +- [Remove Firefox's Extra Tabs at First Launch](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/extratabs.md) +- [Disable the following about:config, about:addons, pages, Developer Menu, and any Preferences in one click](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/disable.md) +- [Firefox Remove Specific Elements from about:preferences panel](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/removeelements.md) +- [Manage Firefox Misc Settings and Buttons Using Endpoint Policy Manager ](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/miscsettings.md) +- [Manage Firefox Certificates](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/certificates.md) +- [Change Firefox application handler (like PDF) to Adobe Reader](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/adobe.md) +- [Manage Firefox Add-ons using Group Policy](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/addons.md) +- [How to Add and Remove Bookmarks folders from the Firefox menu and toolbar](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/firefox/bookmarksmodify.md) + +## Java (all videos) + +- [How to quickly disable Java, everywhere (in an emergency)](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/java/disable.md) +- [Manage and Lock down Java Site List Exceptions](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/java/lockdown.md) +- [Manage Java JRE Control Panel applet with Group Policy](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/java/jre.md) +- [How to Manage the security slider in Java](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/java/securityslider.md) + +## Other applications (all videos) + +- [Netwrix Endpoint Policy Manager can manage Netwrix Password Secure](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/otherapplications/passwordsecure.md) +- [Managing Teams Settings](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/otherapplications/teams.md) +- [Endpoint Policy Manager for Adobe Acrobat](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/otherapplications/acrobat.md) +- [Endpoint Policy Manager for Adobe Flash Player](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/otherapplications/flashplayer.md) +- [Endpoint Policy Manager for IrfanView](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/otherapplications/irfanview.md) +- [Endpoint Policy Manager for Microsoft Office 2013 and 2016](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/otherapplications/office.md) +- [Endpoint Policy Manager for Microsoft Skype for Business (formerly Lync)](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/otherapplications/skype.md) +- [Endpoint Policy Manager for Thunderbird](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/otherapplications/thunderbird.md) diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/virtualization/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/virtualization/_category_.json new file mode 100644 index 0000000000..4aa6d74166 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/virtualization/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Application Virtualization", + "position": 100, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/virtualization/appv.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/virtualization/appv.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/virtualization/appv.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/virtualization/appv.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/virtualization/spoonnovell.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/virtualization/spoonnovell.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/virtualization/spoonnovell.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/virtualization/spoonnovell.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/virtualization/symantec.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/virtualization/symantec.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/virtualization/symantec.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/virtualization/symantec.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/virtualization/thinapp.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/virtualization/thinapp.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/virtualization/thinapp.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/virtualization/thinapp.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/virtualization/uev.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/virtualization/uev.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/virtualization/uev.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/virtualization/uev.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/virtualization/xenapp.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/virtualization/xenapp.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/virtualization/xenapp.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/virtualization/xenapp.md diff --git a/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/whatdoesitdo/_category_.json b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/whatdoesitdo/_category_.json new file mode 100644 index 0000000000..0f85b2c195 --- /dev/null +++ b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/whatdoesitdo/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "What Does It Do And Why You Need It", + "position": 10, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/whatdoesitdo/cloud.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/whatdoesitdo/cloud.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/whatdoesitdo/cloud.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/whatdoesitdo/cloud.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/whatdoesitdo/grouppolicy.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/whatdoesitdo/grouppolicy.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/whatdoesitdo/grouppolicy.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/whatdoesitdo/grouppolicy.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/whatdoesitdo/managers.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/whatdoesitdo/managers.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/whatdoesitdo/managers.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/whatdoesitdo/managers.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/whatdoesitdo/mdm.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/whatdoesitdo/mdm.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/whatdoesitdo/mdm.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/whatdoesitdo/mdm.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/whatdoesitdo/onpremise.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/whatdoesitdo/onpremise.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/whatdoesitdo/onpremise.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/whatdoesitdo/onpremise.md diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/whatdoesitdo/pak.md b/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/whatdoesitdo/pak.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/whatdoesitdo/pak.md rename to docs/endpointpolicymanager/components/applicationsettingsmanager/videos/whatdoesitdo/pak.md diff --git a/docs/endpointpolicymanager/components/browserrouter/_category_.json b/docs/endpointpolicymanager/components/browserrouter/_category_.json new file mode 100644 index 0000000000..fc3145e1ff --- /dev/null +++ b/docs/endpointpolicymanager/components/browserrouter/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Browser Router", + "position": 3, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} diff --git a/docs/endpointpolicymanager/components/browserrouter/knowledgebase/_category_.json b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/_category_.json new file mode 100644 index 0000000000..f890ea6095 --- /dev/null +++ b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Tech Notes", + "position": 3, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "knowledgebase" + } +} diff --git a/docs/endpointpolicymanager/components/browserrouter/knowledgebase/installation/_category_.json b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/installation/_category_.json new file mode 100644 index 0000000000..ee3640f7af --- /dev/null +++ b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/installation/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Installation and Uninstallation", + "position": 1, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/installation/chromemanual.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/installation/chromemanual.md similarity index 98% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/installation/chromemanual.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/installation/chromemanual.md index 5737978918..916219164a 100644 --- a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/installation/chromemanual.md +++ b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/installation/chromemanual.md @@ -22,7 +22,7 @@ for Google chrome manually from a local/network path, follow the below steps. Follow these steps to convert the Chrome Web Store link of any Extension to an `.CRX` File. **Step 1 –** Check the information here: -[What is the Chrome Extension ID for all the published versions of Endpoint Policy Manager Browser Router Client Side Extension?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/chromeextensionid.md) +[What is the Chrome Extension ID for all the published versions of Endpoint Policy Manager Browser Router Client Side Extension?](/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/chromeextensionid.md) Note down the Extension ID. You'll need this step every time we release updates for Software. **Step 2 –** Append the PPBR Chrome Extension ID with the following URL: diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/installation/defaultbrowser.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/installation/defaultbrowser.md similarity index 97% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/installation/defaultbrowser.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/installation/defaultbrowser.md index 263b1603f6..01b61dd5b6 100644 --- a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/installation/defaultbrowser.md +++ b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/installation/defaultbrowser.md @@ -68,7 +68,7 @@ You have to delete this file first…as a one time action using GPPPrefs if - Use Endpoint Policy Manager File Associations Manager to set HTTP and HTTPS to Internet Explorer. This is supported as long as you are NOT using Endpoint Policy Manager Browser Router any - longer. [Can I use Endpoint Policy ManagerBrowser Router and/or Endpoint Policy Manager File Associations Manager to set the default browser?](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/troubleshooting/defaultbrowser.md) + longer. [Can I use Endpoint Policy ManagerBrowser Router and/or Endpoint Policy Manager File Associations Manager to set the default browser?](/docs/endpointpolicymanager/components/fileassociationsmanager/knowledgebase/troubleshooting/defaultbrowser.md) - Use the in-box Group Policy method for File / Protocol Associations (not recommended, since you have Endpoint Policy Manager File Associations Manager, and this method is not dynamic NOR can you use it ALONGSIDEEndpoint Policy Manager File Associations Manager, so it is NOT diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/installation/iepromptdll.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/installation/iepromptdll.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/installation/iepromptdll.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/installation/iepromptdll.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/installation/preventiequestions.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/installation/preventiequestions.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/installation/preventiequestions.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/installation/preventiequestions.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/installation/twologons.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/installation/twologons.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/installation/twologons.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/installation/twologons.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/installation/windowsopenprompt.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/installation/windowsopenprompt.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/installation/windowsopenprompt.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/installation/windowsopenprompt.md diff --git a/docs/endpointpolicymanager/components/browserrouter/knowledgebase/knowledgebase.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/knowledgebase.md new file mode 100644 index 0000000000..fffc4f14c8 --- /dev/null +++ b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/knowledgebase.md @@ -0,0 +1,35 @@ +--- +title: Browser Router Technical Notes +description: Installation, troubleshooting, and technical guidance for Browser Router +--- + +# Browser Router Technical Notes + +Technical documentation for Browser Router installation, troubleshooting, and advanced configuration. + +## Technical Sections + +- [Installation and Uninstallation](installation) - Setup procedures and requirements +- [Troubleshooting](troubleshooting) - Common issues and solutions +- [Tips and Tricks](tipsandtricks) - Advanced techniques and best practices + +## Installation Guide + +Browser Router integrates with your existing management infrastructure. Whether you're using Group Policy, MDM, or Cloud management, our installation guides cover all scenarios. + +## Troubleshooting Resources + +When Browser Router isn't working as expected, our comprehensive troubleshooting section helps you identify and resolve issues quickly. Common topics include: + +- Browser extension conflicts +- Routing rule problems +- Chrome and Firefox specific issues +- Network and security considerations + +## Expert Tips + +Learn advanced techniques and best practices from real-world implementations. Our tips and tricks section covers optimization, security considerations, and advanced configurations. + +--- + +*For immediate support needs, see our [Contact Support](troubleshooting/contactsupport) section.* diff --git a/docs/endpointpolicymanager/components/browserrouter/knowledgebase/tipsandtricks/_category_.json b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/tipsandtricks/_category_.json new file mode 100644 index 0000000000..a74978754e --- /dev/null +++ b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/tipsandtricks/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Tips and Tricks", + "position": 3, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/advancedblockingmessage.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/tipsandtricks/advancedblockingmessage.md similarity index 96% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/advancedblockingmessage.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/tipsandtricks/advancedblockingmessage.md index 1e3b7584ab..2c4c952177 100644 --- a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/advancedblockingmessage.md +++ b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/tipsandtricks/advancedblockingmessage.md @@ -6,7 +6,7 @@ sidebar_position: 10 # Which variables can I use in the Browser Router Advanced Blocking Message? -A customer blocking message is optional. If you don't make any changes, the default looks like this: +A customer blocking message is optional. If you don't make any changes at this point, the default looks like this: ![953_1_thumbnail_image001](/images/endpointpolicymanager/browserrouter/953_1_thumbnail_image001.webp) diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/browsermode.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/tipsandtricks/browsermode.md similarity index 94% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/browsermode.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/tipsandtricks/browsermode.md index 1a3c49ed69..65a6ae5ba0 100644 --- a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/browsermode.md +++ b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/tipsandtricks/browsermode.md @@ -44,6 +44,6 @@ in the required IE Document Mode. :::note IE Mode in Edge takes 65 seconds to take effect after Internet Explorer is running Please see this kb article for more -information: [Endpoint Policy Manager Browser Router: Internet Explorer in Edge mode](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/ieedgemode.md) +information: [Endpoint Policy Manager Browser Router: Internet Explorer in Edge mode](/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/tipsandtricks/ieedgemode.md) ::: diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/commandlinearguments.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/tipsandtricks/commandlinearguments.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/commandlinearguments.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/tipsandtricks/commandlinearguments.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/defined.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/tipsandtricks/defined.md similarity index 95% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/defined.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/tipsandtricks/defined.md index ec2a634fdb..a6ea46cbb9 100644 --- a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/defined.md +++ b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/tipsandtricks/defined.md @@ -44,7 +44,7 @@ Endpoint Policy Manager Browser Router, will open up. :::note there is a special Default Browser option available, called **User Selectable** -[Endpoint Policy Manager Browser Router: Set the Windows 10 Default Browser (once) then drift](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/defaultwindows10.md). +[Endpoint Policy Manager Browser Router: Set the Windows 10 Default Browser (once) then drift](/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/tipsandtricks/defaultwindows10.md). ::: diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/edgelegacybrowser.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/tipsandtricks/edgelegacybrowser.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/edgelegacybrowser.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/tipsandtricks/edgelegacybrowser.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/forcebrowser.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/tipsandtricks/forcebrowser.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/forcebrowser.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/tipsandtricks/forcebrowser.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/removeagent.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/tipsandtricks/removeagent.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/removeagent.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/tipsandtricks/removeagent.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/securityzone.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/tipsandtricks/securityzone.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/securityzone.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/tipsandtricks/securityzone.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/shortcuticons.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/tipsandtricks/shortcuticons.md similarity index 96% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/shortcuticons.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/tipsandtricks/shortcuticons.md index f5f2366d84..97bd65bc5e 100644 --- a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/shortcuticons.md +++ b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/tipsandtricks/shortcuticons.md @@ -7,7 +7,7 @@ sidebar_position: 90 # How do I change the default icon for user-created shortcuts for my default browser? For a good general overview of the topic, please watch this video: -[Set the links to icons to actually show the default browser.](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/browsericon.md) +[Set the links to icons to actually show the default browser.](/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/tipsandtricks/browsericon.md) The most common concern is that the FireFox default icon appears like this: diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/suppresspopup.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/tipsandtricks/suppresspopup.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/suppresspopup.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/tipsandtricks/suppresspopup.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/useselectablebrowser.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/tipsandtricks/useselectablebrowser.md similarity index 96% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/useselectablebrowser.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/tipsandtricks/useselectablebrowser.md index 5349712623..cf5b2180be 100644 --- a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/useselectablebrowser.md +++ b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/tipsandtricks/useselectablebrowser.md @@ -17,9 +17,9 @@ this KB. Endpoint Policy Manager Browser Router has a function called **User Selectable browser**. Learn more about this feature first here: -[Endpoint Policy Manager Browser Router User-Selected Default](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/gettingstarted/userselecteddefault.md) +[Endpoint Policy Manager Browser Router User-Selected Default](/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/gettingstarted/userselecteddefault.md) -[What is meant by "Default Browser" within Endpoint Policy Manager Browser router?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/defined.md) +[What is meant by "Default Browser" within Endpoint Policy Manager Browser router?](/docs/endpointpolicymanager/components/browserrouter/knowledgebase/tipsandtricks/defined.md) You might need to have Endpoint Policy Manager Browser Router indicate that a user specifically chose a particular browser, even if they did not. diff --git a/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/_category_.json b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/_category_.json new file mode 100644 index 0000000000..2a7c1d7f13 --- /dev/null +++ b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Troubleshooting", + "position": 2, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/adobelinks.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/adobelinks.md similarity index 96% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/adobelinks.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/adobelinks.md index 28a2c4846b..c0b46fbb27 100644 --- a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/adobelinks.md +++ b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/adobelinks.md @@ -42,4 +42,4 @@ issue with Adobe and Browser Router. For a list of additional Endpoint Policy Manager items that may need to be excluded please see the KB below: -[How must I configure my Anti-virus or system-level software to work with Endpoint Policy Manager CSE?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/antivirussystemsoftware/antivirus.md) +[How must I configure my Anti-virus or system-level software to work with Endpoint Policy Manager CSE?](/docs/endpointpolicymanager/upgrademaintenance/antivirussystemsoftware/antivirus.md) diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/automaticallydisabled.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/automaticallydisabled.md similarity index 95% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/automaticallydisabled.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/automaticallydisabled.md index db93138555..de2c024890 100644 --- a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/automaticallydisabled.md +++ b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/automaticallydisabled.md @@ -17,7 +17,7 @@ are explicitly added to the policy named "Allow specific extensions to be instal You can use this chart to see the Endpoint Policy Manager Browser Router Extension you should allow to install: -[What is the Chrome Extension ID for all the published versions of Endpoint Policy Manager Browser Router Client Side Extension?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/chromeextensionid.md) +[What is the Chrome Extension ID for all the published versions of Endpoint Policy Manager Browser Router Client Side Extension?](/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/chromeextensionid.md) In this screenshot, the Endpoint Policy Manager Extension is the third one listed. diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/betweenbrowsers.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/betweenbrowsers.md similarity index 95% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/betweenbrowsers.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/betweenbrowsers.md index a7bd5a368e..205e619759 100644 --- a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/betweenbrowsers.md +++ b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/betweenbrowsers.md @@ -18,7 +18,7 @@ Firefox version must be Firefox ESR and not Firefox RR (rapid release). For more **Step 1 –** This troubleshooting guide assumes you have already performed the steps in this initial troubleshooting guide: Browser Router > -[Knowledge Base](/docs/endpointpolicymanager/knowledgebase/knowledgebase.md). This will demonstrate that you are: +[Knowledge Base](/docs/endpointpolicymanager/). This will demonstrate that you are: - Getting the GPOs involved in Netwrix Endpoint Policy Manager (formerly PolicyPak) Browser Router and @@ -116,4 +116,4 @@ webstore): [https://chrome.google.com/webstore/category/extensions?hl=en-US](ht **Step 6 –** Did our Chrome extension appear? **Step 7 –** Related.. If you see ONLY Chrome, and not any FORCED extensions, -[Endpoint Policy Manager Browser Router removes other Chrome ‘force installed' extensions. How can I work around this?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/forceinstall.md) +[Endpoint Policy Manager Browser Router removes other Chrome ‘force installed' extensions. How can I work around this?](/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/forceinstall.md) diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/chromeextension.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/chromeextension.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/chromeextension.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/chromeextension.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/chromeextensionid.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/chromeextensionid.md similarity index 97% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/chromeextensionid.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/chromeextensionid.md index beee48847c..1a31dd3914 100644 --- a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/chromeextensionid.md +++ b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/chromeextensionid.md @@ -9,7 +9,7 @@ sidebar_position: 110 Below is the ID list from Chrome. If you need to, you can force-install an Extension ID via ADMX or Netwrix Endpoint Policy Manager (formerly PolicyPak) Application Manager Pak using this article: -[Endpoint Policy Manager Browser Router removes other Chrome ‘force installed' extensions. How can I work around this?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/forceinstall.md) +[Endpoint Policy Manager Browser Router removes other Chrome ‘force installed' extensions. How can I work around this?](/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/forceinstall.md) Note that Endpoint Policy Manager does not guarantee that the version you are using is definitely in the chrome store. We are only allowed to publish 20 items, as such, the oldest items will be removed diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/chromerouting.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/chromerouting.md similarity index 95% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/chromerouting.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/chromerouting.md index 97ca9cae7c..89bd6ca271 100644 --- a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/chromerouting.md +++ b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/chromerouting.md @@ -53,7 +53,7 @@ olderEndpoint Policy Manager Browser Router Chrome Extensions? A: We have the list of extensions which ARE VALID (now, it is exactly ONE extension) and which WERE valid (100% of the older ones are now turned off) which are on this list -[What is the Chrome Extension ID for all the published versions of Endpoint Policy Manager Browser Router Client Side Extension?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/chromeextensionid.md) +[What is the Chrome Extension ID for all the published versions of Endpoint Policy Manager Browser Router Client Side Extension?](/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/chromeextensionid.md) Q: What should I now? @@ -72,7 +72,7 @@ Q: I cannot update to the latest extension, but I am using builds CSE 18.7.1779. A: We have a KB article about it here: "How can I use the onlyEndpoint Policy Manager published Chrome Extension with my older CSE? (CSE 18.7.1779.937 - 19.12.2283.849)" -[How can I use the only remaining Endpoint Policy Manager published Chrome Extension with my older CSE? (CSE 18.7.1779.937 - 19.12.2283.849)](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/chromeextension.md) +[How can I use the only remaining Endpoint Policy Manager published Chrome Extension with my older CSE? (CSE 18.7.1779.937 - 19.12.2283.849)](/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/chromeextension.md) Q: I'm using a CSE before 18.7.1779.937. What is the workaround? diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/citrixproblems.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/citrixproblems.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/citrixproblems.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/citrixproblems.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/contactsupport.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/contactsupport.md similarity index 92% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/contactsupport.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/contactsupport.md index e18dd6776c..71a334595e 100644 --- a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/contactsupport.md +++ b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/contactsupport.md @@ -34,7 +34,7 @@ Tips: [https://community.ivanti.com/docs/DOC-59389](https://community.ivanti.com/docs/DOC-59389) - For your AV / other software, see your own vendor's exclusions. - Endpoint Policy Manager AV Exclusions: - [How must I configure my Anti-virus or system-level software to work with Endpoint Policy Manager CSE?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/antivirussystemsoftware/antivirus.md) + [How must I configure my Anti-virus or system-level software to work with Endpoint Policy Manager CSE?](/docs/endpointpolicymanager/upgrademaintenance/antivirussystemsoftware/antivirus.md) - If you have a FEW or ONE machine showing the issue: FAQ. **Step 3 –** After that, it could still be a bug. But it would typically appear on MANY machines and @@ -42,7 +42,7 @@ not just a SINGLE or a FEW machines. That being said, if you would like for us t logs, in these cases, we need AT LEAST TWO machines to see a PATTERN in the logs. So be prepared to get logs from multiple machines showing the issue so we can do some deeper investigation. -[What must I send to Endpoint Policy Manager support in order to get the FASTEST support?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/fastsupport.md) +[What must I send to Endpoint Policy Manager support in order to get the FASTEST support?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/fastsupport.md) :::tip Remember, We need AT LEAST two machines of logs to check in this case. diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/criticalwebsiteincompatibility.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/criticalwebsiteincompatibility.md similarity index 91% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/criticalwebsiteincompatibility.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/criticalwebsiteincompatibility.md index a04b966f80..942e4bee86 100644 --- a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/criticalwebsiteincompatibility.md +++ b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/criticalwebsiteincompatibility.md @@ -26,7 +26,7 @@ from all routes. **Step 4 –** After steps 1, 2 and 3… if you can REPRODUCE using latest CSE... then and only then.. send us log files (user and computer) via Sharefile (do not attach.) -[What must I send to Endpoint Policy Manager support in order to get the FASTEST support?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/fastsupport.md) +[What must I send to Endpoint Policy Manager support in order to get the FASTEST support?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/fastsupport.md) **Step 5 –** AFTER you install the latest CSE, you might want to attempt to disable the in-Browser Extensions for the affected browser, but keep Browser Router operating. Here's how to do that (see @@ -38,7 +38,7 @@ screenshot below.) reproduce the issue, you could kill JUST the affected component like Browser Router. Use these instructions: -[What is the Chrome Extension ID for all the published versions of Endpoint Policy Manager Browser Router Client Side Extension?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/chromeextensionid.md) +[What is the Chrome Extension ID for all the published versions of Endpoint Policy Manager Browser Router Client Side Extension?](/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/chromeextensionid.md) (KB shows killing PPPreferences, but in this case you would kill Endpoint Policy Manager Browser Router.) diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/default.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/default.md similarity index 96% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/default.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/default.md index 1587a11c4c..6ac7c5a826 100644 --- a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/default.md +++ b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/default.md @@ -31,13 +31,13 @@ What won’t work: Browser” will be passed onward to Edge (instead of what you might have set it to, say, Firefox, Chrome, etc). Use this article to understand “Endpoint Policy Manager Browser Router Default Policy” type - [What is meant by "Default Browser" within Endpoint Policy Manager Browser router?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/defined.md) + [What is meant by "Default Browser" within Endpoint Policy Manager Browser router?](/docs/endpointpolicymanager/components/browserrouter/knowledgebase/tipsandtricks/defined.md) - Delivering File Associations specifically for PDF for Endpoint Policy Manager File Associations Manager You will also get the same experience if you attempt to use PolicyPak File Associations Manager to change HTTP or HTTPS, even if you’re not using PolicyPak Browser Router. See the -[Can I use Endpoint Policy ManagerBrowser Router and/or Endpoint Policy Manager File Associations Manager to set the default browser?](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/troubleshooting/defaultbrowser.md) +[Can I use Endpoint Policy ManagerBrowser Router and/or Endpoint Policy Manager File Associations Manager to set the default browser?](/docs/endpointpolicymanager/components/fileassociationsmanager/knowledgebase/troubleshooting/defaultbrowser.md) topic for additional information. Troubleshooting: diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/dllcompatible.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/dllcompatible.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/dllcompatible.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/dllcompatible.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/dnscall.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/dnscall.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/dnscall.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/dnscall.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/extensioninactive.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/extensioninactive.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/extensioninactive.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/extensioninactive.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/firefox.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/firefox.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/firefox.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/firefox.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/forceinstall.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/forceinstall.md similarity index 89% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/forceinstall.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/forceinstall.md index 116be36bba..6423251cf8 100644 --- a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/forceinstall.md +++ b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/forceinstall.md @@ -18,7 +18,7 @@ RESULT: You only see Endpoint Policy Manager Browser Router's extension and NOT user-side extensions for Chrome.. Workaround: Endpoint Policy Manager Provides ADMX settings to work around various items in Endpoint Policy Manager On-Prem. See this video to implement the ADMX: -[Troubleshooting with ADMX files](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/admxfiles.md) +[Troubleshooting with ADMX files](/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/admxfiles.md) :::note You shouldn't need to perform these steps (any of them) if you want to dictate Chrome @@ -42,7 +42,7 @@ ADMX setting on USER or COMPUTER side. Use this string found in this article: -[What is the Chrome Extension ID for all the published versions of Endpoint Policy Manager Browser Router Client Side Extension?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/chromeextensionid.md) +[What is the Chrome Extension ID for all the published versions of Endpoint Policy Manager Browser Router Client Side Extension?](/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/chromeextensionid.md) For instance, an example string might look like … @@ -68,4 +68,4 @@ the optional extensions you wish for Chrome. Again, the example extension ID above is just an example. Please use the correct one based upon your CSE. -[What is the Chrome Extension ID for all the published versions of Endpoint Policy Manager Browser Router Client Side Extension?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/chromeextensionid.md) +[What is the Chrome Extension ID for all the published versions of Endpoint Policy Manager Browser Router Client Side Extension?](/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/chromeextensionid.md) diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/fromedgetootherbrowsers.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/fromedgetootherbrowsers.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/fromedgetootherbrowsers.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/fromedgetootherbrowsers.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/fromietootherbrowsers.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/fromietootherbrowsers.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/fromietootherbrowsers.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/fromietootherbrowsers.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/keeporiginaltab.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/keeporiginaltab.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/keeporiginaltab.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/keeporiginaltab.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/launch.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/launch.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/launch.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/launch.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/office365.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/office365.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/office365.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/office365.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/pattern.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/pattern.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/pattern.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/pattern.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/quick.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/quick.md similarity index 97% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/quick.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/quick.md index cbf5b4db17..d8b30700f0 100644 --- a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/quick.md +++ b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/quick.md @@ -54,7 +54,7 @@ In DEFAULT PROGRAMS, verify that PPBRAgent is the Default Browser for HTTP and H :::warning For Non-Domain Joined machines, we (PolicyPak) cannot set this automatically. For more information on this -problem, [Which Endpoint Policy Manager items will not work when the computer is non-domain joined (or the computer is NEVER connected to the Internet)?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/nondomainjoined/limitations.md) +problem, [Which Endpoint Policy Manager items will not work when the computer is non-domain joined (or the computer is NEVER connected to the Internet)?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/nondomainjoined/limitations.md) ::: diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/removed.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/removed.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/removed.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/removed.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/revertlegacy.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/revertlegacy.md similarity index 91% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/revertlegacy.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/revertlegacy.md index 6e34f7f65c..7d20cdc694 100644 --- a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/revertlegacy.md +++ b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/revertlegacy.md @@ -14,10 +14,10 @@ First, be sure you are eligible to use this function by copying the latest Endpo `ADMX` files to your Central Store or using Endpoint Policy Manager Cloud. Directions for Central Store: -[Troubleshooting with ADMX files](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/admxfiles.md) +[Troubleshooting with ADMX files](/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/admxfiles.md) Directions for Endpoint Policy Manager Cloud (if they are not already pre-placed -there):[Endpoint Policy ManagerCloud: Upload and use your own ADMX files to Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/admxfiles.md) +there):[Endpoint Policy ManagerCloud: Upload and use your own ADMX files to Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/admxfiles.md) Then, the setting you should use if directed by support is entitled: diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/routing.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/routing.md similarity index 97% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/routing.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/routing.md index 60af6a3d5c..a463066ad7 100644 --- a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/routing.md +++ b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/routing.md @@ -43,7 +43,7 @@ is not working any longer. The typical ways you could encounter this are: How would I know if I'm affected by Endpoint Policy Manager being forced to take down some older Endpoint Policy Manager Browser Router Chrome Extensions? We have the list of extensions which ARE and WERE valid on this list -[What is the Chrome Extension ID for all the published versions of Endpoint Policy Manager Browser Router Client Side Extension?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/chromeextensionid.md) +[What is the Chrome Extension ID for all the published versions of Endpoint Policy Manager Browser Router Client Side Extension?](/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/chromeextensionid.md) What should you do now? diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/stop.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/stop.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/stop.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/stop.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/tabissue.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/tabissue.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/tabissue.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/tabissue.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/versions.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/versions.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/versions.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/versions.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/wildcardrule.md b/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/wildcardrule.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/wildcardrule.md rename to docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/wildcardrule.md diff --git a/docs/endpointpolicymanager/components/browserrouter/manual/_category_.json b/docs/endpointpolicymanager/components/browserrouter/manual/_category_.json new file mode 100644 index 0000000000..1c4c158a37 --- /dev/null +++ b/docs/endpointpolicymanager/components/browserrouter/manual/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Manual", + "position": 1, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} diff --git a/docs/endpointpolicymanager/components/browserrouter/manual/configuration/_category_.json b/docs/endpointpolicymanager/components/browserrouter/manual/configuration/_category_.json new file mode 100644 index 0000000000..f3e7bac34b --- /dev/null +++ b/docs/endpointpolicymanager/components/browserrouter/manual/configuration/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Configuration", + "position": 3, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/block.md b/docs/endpointpolicymanager/components/browserrouter/manual/configuration/block.md similarity index 92% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/block.md rename to docs/endpointpolicymanager/components/browserrouter/manual/configuration/block.md index 274f6f8515..e5207dc3ab 100644 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/block.md +++ b/docs/endpointpolicymanager/components/browserrouter/manual/configuration/block.md @@ -12,7 +12,7 @@ cannot visit the website. :::note For an overview of using Block policies, see the following video: -[Block web sites from opening in all browsers.](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/gettingstarted/blockwebsites.md) +[Block web sites from opening in all browsers.](/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/gettingstarted/blockwebsites.md) ::: diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/commandlinearguments.md b/docs/endpointpolicymanager/components/browserrouter/manual/configuration/commandlinearguments.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/commandlinearguments.md rename to docs/endpointpolicymanager/components/browserrouter/manual/configuration/commandlinearguments.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/custom.md b/docs/endpointpolicymanager/components/browserrouter/manual/configuration/custom.md similarity index 94% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/custom.md rename to docs/endpointpolicymanager/components/browserrouter/manual/configuration/custom.md index 884c8d6552..16bf0083fd 100644 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/custom.md +++ b/docs/endpointpolicymanager/components/browserrouter/manual/configuration/custom.md @@ -13,7 +13,7 @@ route to. :::note For an overview of using custom policies, see the following video: -[Browser Router with Custom Browsers](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/citrixvirtualapps/custombrowsers.md). +[Browser Router with Custom Browsers](/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/citrixvirtualapps/custombrowsers.md). ::: diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/exportcollections.md b/docs/endpointpolicymanager/components/browserrouter/manual/configuration/exportcollections.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/exportcollections.md rename to docs/endpointpolicymanager/components/browserrouter/manual/configuration/exportcollections.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/itemleveltargeting.md b/docs/endpointpolicymanager/components/browserrouter/manual/configuration/itemleveltargeting.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/itemleveltargeting.md rename to docs/endpointpolicymanager/components/browserrouter/manual/configuration/itemleveltargeting.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/ports.md b/docs/endpointpolicymanager/components/browserrouter/manual/configuration/ports.md similarity index 85% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/ports.md rename to docs/endpointpolicymanager/components/browserrouter/manual/configuration/ports.md index fcac464201..421bd389d0 100644 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/ports.md +++ b/docs/endpointpolicymanager/components/browserrouter/manual/configuration/ports.md @@ -14,7 +14,7 @@ Chrome website. :::note For a video on using Endpoint Policy Manager Browser Router and ports, see -[Endpoint Policy Manager Browser Router and Ports](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/gettingstarted/ports.md). +[Endpoint Policy Manager Browser Router and Ports](/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/gettingstarted/ports.md). ::: @@ -28,6 +28,6 @@ route similar to the one shown below. :::note Not every version of Internet Explorer 11 is ready to receive v2 site lists. For a list of which versions of Internet Explorer 11 use v1 vs v2, see -[When does Endpoint Policy Manager Browser Router write v1 or v2 Enterprise Mode site lists?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/versions.md). +[When does Endpoint Policy Manager Browser Router write v1 or v2 Enterprise Mode site lists?](/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/versions.md). ::: diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/processorderprecedence.md b/docs/endpointpolicymanager/components/browserrouter/manual/configuration/processorderprecedence.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/processorderprecedence.md rename to docs/endpointpolicymanager/components/browserrouter/manual/configuration/processorderprecedence.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/rules.md b/docs/endpointpolicymanager/components/browserrouter/manual/configuration/rules.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/rules.md rename to docs/endpointpolicymanager/components/browserrouter/manual/configuration/rules.md diff --git a/docs/endpointpolicymanager/components/browserrouter/manual/gettingtoknow/_category_.json b/docs/endpointpolicymanager/components/browserrouter/manual/gettingtoknow/_category_.json new file mode 100644 index 0000000000..5b8236d012 --- /dev/null +++ b/docs/endpointpolicymanager/components/browserrouter/manual/gettingtoknow/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Getting to know Browser Router", + "position": 1, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/navigation.md b/docs/endpointpolicymanager/components/browserrouter/manual/gettingtoknow/navigation.md similarity index 97% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/navigation.md rename to docs/endpointpolicymanager/components/browserrouter/manual/gettingtoknow/navigation.md index bcf1803283..00bb0b8bc0 100644 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/navigation.md +++ b/docs/endpointpolicymanager/components/browserrouter/manual/gettingtoknow/navigation.md @@ -35,7 +35,7 @@ policies, collections, or GPOs, or when you choose to use a "on-Group Policy met settings. For more in formation on this, please see the section on -[Understanding Processing Order and Precedence](/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/processorderprecedence.md). +[Understanding Processing Order and Precedence](../configuration/processorderprecedence.md). To complete the Quickstart examples, we recommend creating a collection on the User side. Next,, create a new Browser Router policy, similar to the one shown below. In this example, we are routing diff --git a/docs/endpointpolicymanager/components/browserrouter/manual/gettingtoknow/overview_1.md b/docs/endpointpolicymanager/components/browserrouter/manual/gettingtoknow/overview_1.md new file mode 100644 index 0000000000..ec323a3e63 --- /dev/null +++ b/docs/endpointpolicymanager/components/browserrouter/manual/gettingtoknow/overview_1.md @@ -0,0 +1,41 @@ +--- +title: "Understanding Default Browser Policies" +description: "Understanding Default Browser Policies" +sidebar_position: 20 +--- + +# Understanding Default Browser Policies + +In the previous example, you used the **New Default Browser** policy to set the default browser to +Internet Explorer. In this way, Internet Explorer only would be used when users click on an external +link (e.g., from an email) and there is no other rule routing to a specific browser. Any of the +browsers can be the default, but only one can be chosen as the default. Additionally, there is a +special browser called **User Selectable**. Below you can see how to select the default browser. + +:::note +For an overview of the User Selectable option, see +[Endpoint Policy Manager Browser Router User-Selected Default](/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/gettingstarted/userselecteddefault.md). +::: + + +![about_policypak_browser_router_11](/images/endpointpolicymanager/browserrouter/defaultbrowser/about_endpointpolicymanager_browser_router_11.webp) + +The **User Selectable** option enables the user to specify their desired default browser as Internet +Explorer, Edge, Chrome, or Firefox. The Endpoint Policy Manager engine "learns" this setting at the +next Group Policy background update (or if GPupdate is manually invoked). This means there could be +a situation where the user changes their default browser, but then logs off before Group Policy +re-applies to capture their desired setting. If this is the case, Endpoint Policy Manager cannot +"learn" the user's desired defaults until the user changes the setting and Group Policy re-applies +it in the background. + +You might also want to specify a default browser one time and then drift. In other words, the user +is assigned a default browser the first time they open a URL but can then change the default browser +to one of their own choosing. In this case, we select the same settings as last time except we +choose to apply the rule only one time, as sown below + +![about_policypak_browser_router_12](/images/endpointpolicymanager/browserrouter/defaultbrowser/about_endpointpolicymanager_browser_router_12.webp) + +Users can then change the default browser to their own liking, even though their settings show that +the web browser is managed by their organization. + +![about_policypak_browser_router_13](/images/endpointpolicymanager/browserrouter/defaultbrowser/about_endpointpolicymanager_browser_router_13.webp) diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/overview_2.md b/docs/endpointpolicymanager/components/browserrouter/manual/gettingtoknow/overview_2.md similarity index 79% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/overview_2.md rename to docs/endpointpolicymanager/components/browserrouter/manual/gettingtoknow/overview_2.md index ff31074e68..d71d525d3d 100644 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/overview_2.md +++ b/docs/endpointpolicymanager/components/browserrouter/manual/gettingtoknow/overview_2.md @@ -11,17 +11,17 @@ We have two guides online to help you troubleshoot Endpoint Policy Manager Brows If you're having problems getting Endpoint Policy Manager Browser Router to work, see the following guide: -[How to quickly troubleshoot Endpoint Policy Manager Browser Router](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/quick.md). +[How to quickly troubleshoot Endpoint Policy Manager Browser Router](/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/quick.md). If you're having problems getting Endpoint Policy Manager Browser Router to route between browsers as expected, see the following guide: -[Troubleshooting routing between browsers.](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/betweenbrowsers.md). +[Troubleshooting routing between browsers.](/docs/endpointpolicymanager/components/browserrouter/knowledgebase/troubleshooting/betweenbrowsers.md). Additionally, Endpoint Policy Manager Browser Router has extensive logging, which needs to be turned on. You can do this using the Endpoint Policy Manager Browser Router ADMX templates and turning on logging. A video of the process can be found here: -[Troubleshooting with ADMX files](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/admxfiles.md). +[Troubleshooting with ADMX files](/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/admxfiles.md). Log files for Endpoint Policy Manager Browser Router are found in the two following places: diff --git a/docs/endpointpolicymanager/components/browserrouter/manual/internetexplorer/_category_.json b/docs/endpointpolicymanager/components/browserrouter/manual/internetexplorer/_category_.json new file mode 100644 index 0000000000..841f55aebe --- /dev/null +++ b/docs/endpointpolicymanager/components/browserrouter/manual/internetexplorer/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Internet Explorer", + "position": 4, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/internetexplorer/convertxmls.md b/docs/endpointpolicymanager/components/browserrouter/manual/internetexplorer/convertxmls.md similarity index 95% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/internetexplorer/convertxmls.md rename to docs/endpointpolicymanager/components/browserrouter/manual/internetexplorer/convertxmls.md index 8017c79ac7..926f0f399a 100644 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/internetexplorer/convertxmls.md +++ b/docs/endpointpolicymanager/components/browserrouter/manual/internetexplorer/convertxmls.md @@ -8,7 +8,7 @@ sidebar_position: 20 :::note To get an overview on how to convert existing IE site lists, please see: -[Internet Explorer to Endpoint Policy Manager Browser Router Site lists](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/iesitelists.md). +[Internet Explorer to Endpoint Policy Manager Browser Router Site lists](/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/tipsandtricks/iesitelists.md). ::: diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/internetexplorer/edgemod.md b/docs/endpointpolicymanager/components/browserrouter/manual/internetexplorer/edgemod.md similarity index 94% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/internetexplorer/edgemod.md rename to docs/endpointpolicymanager/components/browserrouter/manual/internetexplorer/edgemod.md index 7092efa3d0..3be54d87b2 100644 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/internetexplorer/edgemod.md +++ b/docs/endpointpolicymanager/components/browserrouter/manual/internetexplorer/edgemod.md @@ -9,7 +9,7 @@ sidebar_position: 10 :::note To get an overview of Endpoint Policy Manager Browser Router and Internet Explorer in Edge Mode, please see: -[Endpoint Policy Manager Browser Router: Internet Explorer in Edge mode](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/ieedgemode.md). +[Endpoint Policy Manager Browser Router: Internet Explorer in Edge mode](/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/tipsandtricks/ieedgemode.md). ::: @@ -46,7 +46,7 @@ see that the Endpoint Policy Manager website now appears in IE mode within the E :::note To get an overview on how to convert existing IE site lists, please see -[Internet Explorer to Endpoint Policy Manager Browser Router Site lists](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/iesitelists.md). +[Internet Explorer to Endpoint Policy Manager Browser Router Site lists](/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/tipsandtricks/iesitelists.md). ::: @@ -88,7 +88,7 @@ the Windows 10 Edge browser functions alongside Internet Explorer 11. :::note To get an overview of Endpoint Policy Manager Browser Router's special policies for Microsoft Edge, please see -[Endpoint Policy Manager and Edge ‘Special' policies](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/gettingstarted/edgespecial.md). +[Endpoint Policy Manager and Edge ‘Special' policies](/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/gettingstarted/edgespecial.md). ::: diff --git a/docs/endpointpolicymanager/components/browserrouter/manual/internetexplorer/overview.md b/docs/endpointpolicymanager/components/browserrouter/manual/internetexplorer/overview.md new file mode 100644 index 0000000000..255fd218f3 --- /dev/null +++ b/docs/endpointpolicymanager/components/browserrouter/manual/internetexplorer/overview.md @@ -0,0 +1,88 @@ +--- +title: "Understanding Browser Router and Internet Explorer" +description: "Understanding Browser Router and Internet Explorer" +sidebar_position: 80 +--- + +# Understanding Browser Router and Internet Explorer + +Endpoint Policy Manager Browser Router has special functions for managing Internet Explorer. First, +you can set Internet Explorer 11's Enterprise Mode and Document Modes for an individual website. +Second, there are also two overriding policies that help route many websites to Internet Explorer, +which is something that IT departments often want to do. + +## Setting Internet Explorer Enterprise Modes and Document Modes + +Internet Explorer 11, when patched to certain levels, will embrace Enterprise Mode (EM) and Document +Modes (DM). Internet Explorer 11 EM and DM enable you to tell Internet Explorer 11 how to render +certain websites for a more compatible view. + +:::note +To get an overview of Endpoint Policy Manager Browser Router and Internet Explorer 11's +Enterprise and Document Modes, please see +[http://www.endpointpolicymanager.com/video/endpointpolicymanager-browser-router-enterprise-and-document-modes.html](http://www.endpointpolicymanager.com/video/endpointpolicymanager-browser-router-block-web-sites-from-opening-in-all-browsers.html). +::: + + +:::note +To learn more about Internet Explorer 11 Enterprise and Document Modes, see the following +Microsoft websites: Enterprise Mode is at: +[Internet Explorer to Endpoint Policy Manager Browser Router Site lists](/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/tipsandtricks/iesitelists.md) +and Document Modes is at: +[https://technet.microsoft.com/en-us/library/dn321432.aspx](http://www.endpointpolicymanager.com/video/endpointpolicymanager-using-pp-browser-router-on-citrix-or-rds-servers-with-published-browser-applications.html). +::: + + +:::warning +This Endpoint Policy Manager Browser Router method is meant to replace the Microsoft +method of creating Enterprise Mode site lists. Do not try to use Microsoft's list (explained in the +Microsoft URL above) along with Endpoint Policy Manager Browser Router's function. Only use Endpoint +Policy Manager Browser Router to perform this function. +::: + + +Using Endpoint Policy Manager Browser Router, you can require particular websites to use a specific +Internet Explorer Enterprise Mode or Document Mode. + +![about_policypak_browser_router_25](/images/endpointpolicymanager/browserrouter/internetexplorer/about_endpointpolicymanager_browser_router_25.webp) + +Internet Explorer 11's Enterprise Mode has two specifications: v1 and v2. Endpoint Policy Manager +Browser Router automatically detectsthe version of Internet Explorer installed on your endpoint +machines and write the Enterprise site list based on the correct specification. Note that **PORT** +is not supported in the Internet Explorer EM v1 specification, and as such, is ignored when v1 site +lists must be used. + +:::note +Site lists for v2 are automatically created and used when Windows 10 and Internet Explorer +11 (version 11.0.10586.\*) are detected. Site lists for v1 are used in all other circumstances. +::: + + +Note the checkbox labeled **Don't make a route**. If the user is already using Firefox or Chrome and +goes to this website, Internet Explorer will always open when **Don't make a route** is unchecked. +When it is checked, the user is free to use Firefox or Chrome on this website, and they will only +see the Internet Explorer Document Mode set when they specifically select Internet Explorer. This +gives you the ability to use Endpoint Policy Manager Browser Router to manage the Internet Explorer +Enterprise Mode site list without having to force users to specifically use Internet Explorer and +impose a route. + +You can easily see if Endpoint Policy Manager Browser Router and the Internet Explorer 11 Enterprise +Mode are working. There's an Internet Explorer 11 EM icon in the title bar next to the address bar +that demonstrates that EM is active. + +![about_policypak_browser_router_26](/images/endpointpolicymanager/browserrouter/internetexplorer/about_endpointpolicymanager_browser_router_26.webp) + +If you've chosen to use one of the Internet Explorer Document Modes, you might have a hard time +locating them if they are applying correctly since they are difficult to see. For instance, here +we've set a page to display in IE5 Document Mode using Endpoint Policy Manager Browser Router. + +![about_policypak_browser_router_27](/images/endpointpolicymanager/browserrouter/internetexplorer/about_endpointpolicymanager_browser_router_27.webp) + +When users visit the website at this point, Endpoint Policy Manager Browser Router correctly sets +the IE Document Mode accordingly. To see the DM, you need to press F12 within Internet Explorer 11 +for **Developer Tools**, and then click the Emulation tab. + +![about_policypak_browser_router_28](/images/endpointpolicymanager/browserrouter/internetexplorer/about_endpointpolicymanager_browser_router_28.webp) + +In this way, you can easily create routes for all webpages that need special rendering modes using +Endpoint Policy Manager Browser Router. diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/internetexplorer/specialtypes.md b/docs/endpointpolicymanager/components/browserrouter/manual/internetexplorer/specialtypes.md similarity index 93% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/internetexplorer/specialtypes.md rename to docs/endpointpolicymanager/components/browserrouter/manual/internetexplorer/specialtypes.md index 016f2aa337..3960cbdb00 100644 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/internetexplorer/specialtypes.md +++ b/docs/endpointpolicymanager/components/browserrouter/manual/internetexplorer/specialtypes.md @@ -13,7 +13,7 @@ Explorer 11. :::note To get an overview of Endpoint Policy Manager Browser Router's special policies for Microsoft Edge, please see -[Endpoint Policy Manager and Edge ‘Special' policies](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/gettingstarted/edgespecial.md). +[Endpoint Policy Manager and Edge ‘Special' policies](/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/gettingstarted/edgespecial.md). ::: diff --git a/docs/endpointpolicymanager/components/browserrouter/manual/overview.md b/docs/endpointpolicymanager/components/browserrouter/manual/overview.md new file mode 100644 index 0000000000..5fcce9590e --- /dev/null +++ b/docs/endpointpolicymanager/components/browserrouter/manual/overview.md @@ -0,0 +1,33 @@ +--- +title: Browser Router Manual +description: Complete guide to configuring and using Browser Router +--- + +# Browser Router Manual + +This manual provides comprehensive information about Browser Router, a component that automatically routes websites to appropriate browsers based on rules you define. + +## Manual Sections + +- [Getting to Know Browser Router](gettingtoknow) - Overview and basic concepts +- [Understanding Default Browser Policies](understandingdefaultbrowser) - How default browser management works +- [Configuration](configuration) - Rules, targeting, and advanced settings +- [Internet Explorer](internetexplorer) - IE-specific configuration and features + +## Overview + +Browser Router solves the common problem of ensuring the right browser opens for the right website. Whether you need legacy applications to use Internet Explorer, or want Chrome for specific sites, Browser Router handles this automatically based on your rules. + +### Key Benefits + +- **Seamless User Experience**: Users don't need to manually choose browsers +- **Legacy Application Support**: Ensure compatibility with older web applications +- **Security**: Route potentially risky sites to sandboxed browsers +- **Productivity**: Eliminate browser compatibility issues + +### Getting Started + +1. Start with [Getting to Know Browser Router](gettingtoknow) to understand the basics +2. Learn about [Configuration](configuration) to set up routing rules +3. Check [Internet Explorer](internetexplorer) settings if using IE routing +4. Review [Understanding Default Browser Policies](understandingdefaultbrowser) for advanced scenarios diff --git a/docs/endpointpolicymanager/components/browserrouter/manual/understandingdefaultbrowser/_category_.json b/docs/endpointpolicymanager/components/browserrouter/manual/understandingdefaultbrowser/_category_.json new file mode 100644 index 0000000000..376f4076f1 --- /dev/null +++ b/docs/endpointpolicymanager/components/browserrouter/manual/understandingdefaultbrowser/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Understanding Default Browser Policies", + "position": 2, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/osweb.md b/docs/endpointpolicymanager/components/browserrouter/manual/understandingdefaultbrowser/osweb.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/osweb.md rename to docs/endpointpolicymanager/components/browserrouter/manual/understandingdefaultbrowser/osweb.md diff --git a/docs/endpointpolicymanager/components/browserrouter/overview.md b/docs/endpointpolicymanager/components/browserrouter/overview.md new file mode 100644 index 0000000000..2d7c3bef9b --- /dev/null +++ b/docs/endpointpolicymanager/components/browserrouter/overview.md @@ -0,0 +1,29 @@ +--- +title: Browser Router Overview +description: Browser Router helps you route specific websites to specific browsers automatically +--- + +# Browser Router + +Browser Router is a powerful component of Endpoint Policy Manager (PolicyPak) that automatically routes websites to the appropriate browser based on rules you define. This ensures users always use the right browser for the right website, improving compatibility and security. + +## Key Features + +- **Automatic Browser Routing**: Route websites to specific browsers based on URL patterns +- **Default Browser Management**: Control which browser opens by default +- **Legacy Application Support**: Ensure legacy web applications work with Internet Explorer +- **Cross-Browser Compatibility**: Support for Chrome, Firefox, Edge, and Internet Explorer +- **Enterprise Integration**: Works with Group Policy, MDM, and Cloud management + +## Documentation Sections + +- [Manual](manual/) - Comprehensive documentation and configuration guides +- [Videos](videolearningcenter/) - Video tutorials and demonstrations +- [Tech Notes](knowledgebase/) - Installation, troubleshooting, and tips + +## Quick Links + +- [Understanding Browser Routing Rules](manual/configuration/rules) +- [Installation Guide](knowledgebase/installation) +- [Troubleshooting Guide](knowledgebase/troubleshooting) +- [Getting Started Videos](videolearningcenter/gettingstarted) diff --git a/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/_category_.json b/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/_category_.json new file mode 100644 index 0000000000..08b2b0a69c --- /dev/null +++ b/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Videos", + "position": 2, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "videolearningcenter" + } +} diff --git a/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/citrixvirtualapps/_category_.json b/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/citrixvirtualapps/_category_.json new file mode 100644 index 0000000000..8142be3e32 --- /dev/null +++ b/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/citrixvirtualapps/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Citrix Virtual Apps", + "position": 4, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/citrixvirtualapps/citrix.md b/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/citrixvirtualapps/citrix.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/citrixvirtualapps/citrix.md rename to docs/endpointpolicymanager/components/browserrouter/videolearningcenter/citrixvirtualapps/citrix.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/citrixvirtualapps/custombrowsers.md b/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/citrixvirtualapps/custombrowsers.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/citrixvirtualapps/custombrowsers.md rename to docs/endpointpolicymanager/components/browserrouter/videolearningcenter/citrixvirtualapps/custombrowsers.md diff --git a/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/gettingstarted/_category_.json b/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/gettingstarted/_category_.json new file mode 100644 index 0000000000..edb57b5129 --- /dev/null +++ b/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/gettingstarted/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Getting Started", + "position": 1, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/gettingstarted/blockwebsites.md b/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/gettingstarted/blockwebsites.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/gettingstarted/blockwebsites.md rename to docs/endpointpolicymanager/components/browserrouter/videolearningcenter/gettingstarted/blockwebsites.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/gettingstarted/edgespecial.md b/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/gettingstarted/edgespecial.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/gettingstarted/edgespecial.md rename to docs/endpointpolicymanager/components/browserrouter/videolearningcenter/gettingstarted/edgespecial.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/gettingstarted/edgesupport.md b/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/gettingstarted/edgesupport.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/gettingstarted/edgesupport.md rename to docs/endpointpolicymanager/components/browserrouter/videolearningcenter/gettingstarted/edgesupport.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/gettingstarted/ie.md b/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/gettingstarted/ie.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/gettingstarted/ie.md rename to docs/endpointpolicymanager/components/browserrouter/videolearningcenter/gettingstarted/ie.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/gettingstarted/ports.md b/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/gettingstarted/ports.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/gettingstarted/ports.md rename to docs/endpointpolicymanager/components/browserrouter/videolearningcenter/gettingstarted/ports.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/gettingstarted/rightbrowser.md b/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/gettingstarted/rightbrowser.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/gettingstarted/rightbrowser.md rename to docs/endpointpolicymanager/components/browserrouter/videolearningcenter/gettingstarted/rightbrowser.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/gettingstarted/userselecteddefault.md b/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/gettingstarted/userselecteddefault.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/gettingstarted/userselecteddefault.md rename to docs/endpointpolicymanager/components/browserrouter/videolearningcenter/gettingstarted/userselecteddefault.md diff --git a/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/methods/_category_.json b/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/methods/_category_.json new file mode 100644 index 0000000000..bf3482899d --- /dev/null +++ b/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/methods/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Methods: Cloud, MDM and SCCM", + "position": 2, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/methods/cloud.md b/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/methods/cloud.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/methods/cloud.md rename to docs/endpointpolicymanager/components/browserrouter/videolearningcenter/methods/cloud.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/methods/mdm.md b/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/methods/mdm.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/methods/mdm.md rename to docs/endpointpolicymanager/components/browserrouter/videolearningcenter/methods/mdm.md diff --git a/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/tipsandtricks/_category_.json b/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/tipsandtricks/_category_.json new file mode 100644 index 0000000000..a74978754e --- /dev/null +++ b/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/tipsandtricks/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Tips and Tricks", + "position": 3, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/browsericon.md b/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/tipsandtricks/browsericon.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/browsericon.md rename to docs/endpointpolicymanager/components/browserrouter/videolearningcenter/tipsandtricks/browsericon.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/chrome.md b/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/tipsandtricks/chrome.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/chrome.md rename to docs/endpointpolicymanager/components/browserrouter/videolearningcenter/tipsandtricks/chrome.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/chromenondomainjoined.md b/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/tipsandtricks/chromenondomainjoined.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/chromenondomainjoined.md rename to docs/endpointpolicymanager/components/browserrouter/videolearningcenter/tipsandtricks/chromenondomainjoined.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/defaultwindows10.md b/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/tipsandtricks/defaultwindows10.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/defaultwindows10.md rename to docs/endpointpolicymanager/components/browserrouter/videolearningcenter/tipsandtricks/defaultwindows10.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/edge.md b/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/tipsandtricks/edge.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/edge.md rename to docs/endpointpolicymanager/components/browserrouter/videolearningcenter/tipsandtricks/edge.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/firefox.md b/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/tipsandtricks/firefox.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/firefox.md rename to docs/endpointpolicymanager/components/browserrouter/videolearningcenter/tipsandtricks/firefox.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/ieedgemode.md b/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/tipsandtricks/ieedgemode.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/ieedgemode.md rename to docs/endpointpolicymanager/components/browserrouter/videolearningcenter/tipsandtricks/ieedgemode.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/ieforce.md b/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/tipsandtricks/ieforce.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/ieforce.md rename to docs/endpointpolicymanager/components/browserrouter/videolearningcenter/tipsandtricks/ieforce.md diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/iesitelists.md b/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/tipsandtricks/iesitelists.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/iesitelists.md rename to docs/endpointpolicymanager/components/browserrouter/videolearningcenter/tipsandtricks/iesitelists.md diff --git a/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/videolearningcenter.md b/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/videolearningcenter.md new file mode 100644 index 0000000000..174c34ce39 --- /dev/null +++ b/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/videolearningcenter.md @@ -0,0 +1,33 @@ +--- +title: Browser Router Videos +description: Video tutorials and demonstrations for Browser Router +--- + +# Browser Router Video Learning Center + +Learn Browser Router through comprehensive video tutorials covering everything from basic concepts to advanced configurations. + +## Video Categories + +- [Getting Started](gettingstarted) - Basic concepts and first steps +- [Methods: Cloud, MDM and SCCM](methods) - Deployment and management methods +- [Tips and Tricks](tipsandtricks) - Advanced techniques and best practices +- [Citrix Virtual Apps](citrixvirtualapps) - Citrix-specific configurations + +## Featured Videos + +### Getting Started +Perfect for new users who want to understand Browser Router fundamentals and see it in action. + +### Deployment Methods +Learn how to deploy and manage Browser Router using different enterprise methods including Cloud, MDM, and SCCM. + +### Advanced Techniques +Discover tips, tricks, and advanced configurations to get the most out of Browser Router. + +### Citrix Integration +Specialized guidance for using Browser Router in Citrix Virtual Apps environments. + +--- + +*All videos include step-by-step guidance and real-world examples to help you implement Browser Router successfully.* diff --git a/docs/endpointpolicymanager/components/devicemanager/_category_.json b/docs/endpointpolicymanager/components/devicemanager/_category_.json new file mode 100644 index 0000000000..6d98cadaec --- /dev/null +++ b/docs/endpointpolicymanager/components/devicemanager/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Device Manager", + "position": 4, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} diff --git a/docs/endpointpolicymanager/components/devicemanager/knowledgebase/_category_.json b/docs/endpointpolicymanager/components/devicemanager/knowledgebase/_category_.json new file mode 100644 index 0000000000..f890ea6095 --- /dev/null +++ b/docs/endpointpolicymanager/components/devicemanager/knowledgebase/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Tech Notes", + "position": 3, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "knowledgebase" + } +} diff --git a/docs/endpointpolicymanager/components/devicemanager/knowledgebase/installation/_category_.json b/docs/endpointpolicymanager/components/devicemanager/knowledgebase/installation/_category_.json new file mode 100644 index 0000000000..ee3640f7af --- /dev/null +++ b/docs/endpointpolicymanager/components/devicemanager/knowledgebase/installation/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Installation and Uninstallation", + "position": 1, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/components/devicemanager/knowledgebase/knowledgebase.md b/docs/endpointpolicymanager/components/devicemanager/knowledgebase/knowledgebase.md new file mode 100644 index 0000000000..f13183e225 --- /dev/null +++ b/docs/endpointpolicymanager/components/devicemanager/knowledgebase/knowledgebase.md @@ -0,0 +1,30 @@ +--- +title: Device Manager Technical Notes +description: Technical documentation for Device Manager +--- + +# Device Manager Technical Notes + +Technical documentation for Device Manager installation, configuration, and troubleshooting. + +## Technical Sections + +- [Installation and Uninstallation](installation) - Setup and deployment procedures +- [Troubleshooting](troubleshooting) - Issue resolution and diagnostics +- [Tips and Tricks](tipsandtricks) - Advanced configuration techniques + +## Overview + +Device Manager provides enterprise-grade device control capabilities. This technical documentation helps administrators implement effective device policies and resolve common issues. + +## Key Technical Areas + +- Device identification and classification +- Policy precedence and conflicts +- Registry and system integration +- Performance considerations +- Logging and monitoring + +--- + +*Consult the troubleshooting section for common issues and solutions.* diff --git a/docs/endpointpolicymanager/components/devicemanager/knowledgebase/tipsandtricks/_category_.json b/docs/endpointpolicymanager/components/devicemanager/knowledgebase/tipsandtricks/_category_.json new file mode 100644 index 0000000000..a74978754e --- /dev/null +++ b/docs/endpointpolicymanager/components/devicemanager/knowledgebase/tipsandtricks/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Tips and Tricks", + "position": 3, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/components/devicemanager/knowledgebase/troubleshooting/_category_.json b/docs/endpointpolicymanager/components/devicemanager/knowledgebase/troubleshooting/_category_.json new file mode 100644 index 0000000000..2a7c1d7f13 --- /dev/null +++ b/docs/endpointpolicymanager/components/devicemanager/knowledgebase/troubleshooting/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Troubleshooting", + "position": 2, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/manuals/devicemanagementpak/devicemanager/troubleshooting.md b/docs/endpointpolicymanager/components/devicemanager/knowledgebase/troubleshooting/troubleshooting.md similarity index 100% rename from docs/endpointpolicymanager/manuals/devicemanagementpak/devicemanager/troubleshooting.md rename to docs/endpointpolicymanager/components/devicemanager/knowledgebase/troubleshooting/troubleshooting.md diff --git a/docs/endpointpolicymanager/components/devicemanager/manual/_category_.json b/docs/endpointpolicymanager/components/devicemanager/manual/_category_.json new file mode 100644 index 0000000000..1c4c158a37 --- /dev/null +++ b/docs/endpointpolicymanager/components/devicemanager/manual/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Manual", + "position": 1, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} diff --git a/docs/endpointpolicymanager/components/devicemanager/manual/configuration/_category_.json b/docs/endpointpolicymanager/components/devicemanager/manual/configuration/_category_.json new file mode 100644 index 0000000000..231704b45b --- /dev/null +++ b/docs/endpointpolicymanager/components/devicemanager/manual/configuration/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Configuration", + "position": 2, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/manuals/devicemanagementpak/devicemanager/helpertool.md b/docs/endpointpolicymanager/components/devicemanager/manual/configuration/helpertool.md similarity index 100% rename from docs/endpointpolicymanager/manuals/devicemanagementpak/devicemanager/helpertool.md rename to docs/endpointpolicymanager/components/devicemanager/manual/configuration/helpertool.md diff --git a/docs/endpointpolicymanager/manuals/devicemanagementpak/devicemanager/rules.md b/docs/endpointpolicymanager/components/devicemanager/manual/configuration/rules.md similarity index 95% rename from docs/endpointpolicymanager/manuals/devicemanagementpak/devicemanager/rules.md rename to docs/endpointpolicymanager/components/devicemanager/manual/configuration/rules.md index 35702791c0..52d87e10d3 100644 --- a/docs/endpointpolicymanager/manuals/devicemanagementpak/devicemanager/rules.md +++ b/docs/endpointpolicymanager/components/devicemanager/manual/configuration/rules.md @@ -10,7 +10,7 @@ Admin Approval enables you to anticipate devices without rules and enable users desk to help authorize sanctioned devices - temporarily or permanently. See the -[Device Manager Admin Approval and Automatic Rules Creation](/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/gettingstarted/dmapprovalautorules.md) +[Device Manager Admin Approval and Automatic Rules Creation](/docs/endpointpolicymanager/components/devicemanager/videolearningcenter/gettingstarted/dmapprovalautorules.md) topic for additional information on Admin Approval & Branding and Customization. This document refers to the person doing the approval as an Approver. This can be someone on your @@ -132,13 +132,13 @@ To get out of this problem if you get into it, you have two choices: - Update the policy by disabling the Global Policy or turning off Device Manager. - Or on a single machine you may erase the value for the device you granted Permanent access to. See the - [What are the registry settings for Device Manager (and how do I reset Device Manager Admin Approval)?](/docs/endpointpolicymanager/knowledgebase/devicemanager/knowledgebase/registry.md) + [What are the registry settings for Device Manager (and how do I reset Device Manager Admin Approval)?](../../knowledgebase/troubleshooting/troubleshooting.md) topic for additional information. ## Admin Approval Using Email Method You can use Admin Approval requests to go through your service desk as email requests. See the -[Endpoint Policy Device Manager and End-User Emails to Support](/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/gettingstarted/enduser.md) topic +[Endpoint Policy Device Manager and End-User Emails to Support](/docs/endpointpolicymanager/components/devicemanager/videolearningcenter/gettingstarted/enduser.md) topic for additional information. The email method will attempt to use your registered mail application. Your email app must be diff --git a/docs/endpointpolicymanager/components/devicemanager/manual/gettingtoknow/_category_.json b/docs/endpointpolicymanager/components/devicemanager/manual/gettingtoknow/_category_.json new file mode 100644 index 0000000000..9d2fe6d006 --- /dev/null +++ b/docs/endpointpolicymanager/components/devicemanager/manual/gettingtoknow/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Getting to know Device Manager", + "position": 1, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/manuals/devicemanagementpak/devicemanager/devicemanagerpolicies.md b/docs/endpointpolicymanager/components/devicemanager/manual/gettingtoknow/devicemanagerpolicies.md similarity index 93% rename from docs/endpointpolicymanager/manuals/devicemanagementpak/devicemanager/devicemanagerpolicies.md rename to docs/endpointpolicymanager/components/devicemanager/manual/gettingtoknow/devicemanagerpolicies.md index 42b43d68d6..af50816887 100644 --- a/docs/endpointpolicymanager/manuals/devicemanagementpak/devicemanager/devicemanagerpolicies.md +++ b/docs/endpointpolicymanager/components/devicemanager/manual/gettingtoknow/devicemanagerpolicies.md @@ -92,8 +92,8 @@ you're adding users not-joined to Active Directory, and only using an MDM servi :::note To get an overview of how to acquire SIDs with your MDM service and then use them with Endpoint Policy Manager Device Manager, see the -[How do I get Azure AD SIDs and use them with Item Level Targeting?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/entraidsids.md) -and [Block and Allow USB and CD-ROMs with your MDM solution](/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/methods/mdm.md) topics for +[How do I get Azure AD SIDs and use them with Item Level Targeting?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/entraidsids.md) +and [Block and Allow USB and CD-ROMs with your MDM solution](/docs/endpointpolicymanager/components/devicemanager/videolearningcenter/methods/mdm.md) topics for additional information. ::: @@ -123,15 +123,15 @@ However, as a reminder you may also use Endpoint Policy Manager Device Manager t - Allow specific user(s) to use all devices. This is useful if you want some people to have blanked access to all devices. Not usually advised. See the - [Allow ONE user (or group) access to USB and/or CD-ROM and DVDs](/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/gettingstarted/usbdriveallowuser.md) + [Allow ONE user (or group) access to USB and/or CD-ROM and DVDs](/docs/endpointpolicymanager/components/devicemanager/videolearningcenter/gettingstarted/usbdriveallowuser.md) topic for additional information. - Allow specific devices based upon Serial Number(s). See the - [Permit specific devices by serial number](/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/gettingstarted/serialnumber.md) topic for + [Permit specific devices by serial number](/docs/endpointpolicymanager/components/devicemanager/videolearningcenter/gettingstarted/serialnumber.md) topic for additional information. - Allow specific devices based upon BitLocker Key ID (restricts a specific BitLocker device) or Allow ANY BitLocker encrypted volume (useful if you just want to make sure users are using Bitlocker to keep data always encrypted). See the - [Restrict access only to Bitlocker drives](/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/gettingstarted/bitlockerdrives.md) topic for + [Restrict access only to Bitlocker drives](/docs/endpointpolicymanager/components/devicemanager/videolearningcenter/gettingstarted/bitlockerdrives.md) topic for additional information. ## Phone / WPD Policies diff --git a/docs/endpointpolicymanager/manuals/devicemanagementpak/devicemanager/globaldevicemanager.md b/docs/endpointpolicymanager/components/devicemanager/manual/gettingtoknow/globaldevicemanager.md similarity index 100% rename from docs/endpointpolicymanager/manuals/devicemanagementpak/devicemanager/globaldevicemanager.md rename to docs/endpointpolicymanager/components/devicemanager/manual/gettingtoknow/globaldevicemanager.md diff --git a/docs/endpointpolicymanager/components/devicemanager/manual/overview.md b/docs/endpointpolicymanager/components/devicemanager/manual/overview.md new file mode 100644 index 0000000000..bd41ac049d --- /dev/null +++ b/docs/endpointpolicymanager/components/devicemanager/manual/overview.md @@ -0,0 +1,29 @@ +--- +title: Device Manager Manual +description: Complete guide to configuring Device Manager policies +--- + +# Device Manager Manual + +This manual provides comprehensive information about Device Manager, a component that controls hardware device access and restrictions in enterprise environments. + +## Manual Sections + +- [Getting to Know Device Manager](gettingtoknow) - Overview and basic concepts +- [Configuration](configuration) - Policy setup and device rules + +## Overview + +Device Manager addresses the security challenge of controlling hardware device access. Whether you need to prevent USB storage devices for data protection or allow specific printers while blocking others, Device Manager provides the necessary controls. + +### Key Benefits + +- **Data Loss Prevention**: Block unauthorized storage devices +- **Security Compliance**: Meet regulatory requirements for device control +- **Operational Control**: Allow business-required devices while blocking others +- **Audit Trail**: Track all device access attempts + +### Getting Started + +1. Review [Getting to Know Device Manager](gettingtoknow) for fundamental concepts +2. Configure policies using [Configuration](configuration) guides diff --git a/docs/endpointpolicymanager/components/devicemanager/overview.md b/docs/endpointpolicymanager/components/devicemanager/overview.md new file mode 100644 index 0000000000..7d57b331a3 --- /dev/null +++ b/docs/endpointpolicymanager/components/devicemanager/overview.md @@ -0,0 +1,28 @@ +--- +title: Device Manager Overview +description: Device Manager controls hardware device access and restrictions +--- + +# Device Manager + +Device Manager is a component of Endpoint Policy Manager (PolicyPak) that provides granular control over hardware devices and peripherals. It allows administrators to allow, block, or audit device usage to maintain security and compliance. + +## Key Features + +- **Device Control**: Allow or block specific hardware devices +- **USB Management**: Control USB storage devices, printers, and other peripherals +- **Audit Capabilities**: Track device usage and access attempts +- **Granular Policies**: Configure rules based on device type, vendor, or specific devices +- **User-Based Controls**: Different policies for different users or groups + +## Documentation Sections + +- [Manual](manual/) - Configuration guides and policy management +- [Videos](videolearningcenter/) - Video tutorials and demonstrations +- [Tech Notes](knowledgebase/) - Technical guidance and troubleshooting + +## Quick Links + +- [Device Policies Configuration](manual/configuration/rules) +- [Getting Started Videos](videolearningcenter/gettingstarted) +- [Troubleshooting Guide](knowledgebase/troubleshooting) diff --git a/docs/endpointpolicymanager/components/devicemanager/videolearningcenter/_category_.json b/docs/endpointpolicymanager/components/devicemanager/videolearningcenter/_category_.json new file mode 100644 index 0000000000..08b2b0a69c --- /dev/null +++ b/docs/endpointpolicymanager/components/devicemanager/videolearningcenter/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Videos", + "position": 2, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "videolearningcenter" + } +} diff --git a/docs/endpointpolicymanager/components/devicemanager/videolearningcenter/gettingstarted/_category_.json b/docs/endpointpolicymanager/components/devicemanager/videolearningcenter/gettingstarted/_category_.json new file mode 100644 index 0000000000..edb57b5129 --- /dev/null +++ b/docs/endpointpolicymanager/components/devicemanager/videolearningcenter/gettingstarted/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Getting Started", + "position": 1, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/gettingstarted/bitlockerdrives.md b/docs/endpointpolicymanager/components/devicemanager/videolearningcenter/gettingstarted/bitlockerdrives.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/gettingstarted/bitlockerdrives.md rename to docs/endpointpolicymanager/components/devicemanager/videolearningcenter/gettingstarted/bitlockerdrives.md diff --git a/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/gettingstarted/dmapprovalautorules.md b/docs/endpointpolicymanager/components/devicemanager/videolearningcenter/gettingstarted/dmapprovalautorules.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/gettingstarted/dmapprovalautorules.md rename to docs/endpointpolicymanager/components/devicemanager/videolearningcenter/gettingstarted/dmapprovalautorules.md diff --git a/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/gettingstarted/dmhelpertool.md b/docs/endpointpolicymanager/components/devicemanager/videolearningcenter/gettingstarted/dmhelpertool.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/gettingstarted/dmhelpertool.md rename to docs/endpointpolicymanager/components/devicemanager/videolearningcenter/gettingstarted/dmhelpertool.md diff --git a/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/gettingstarted/enduser.md b/docs/endpointpolicymanager/components/devicemanager/videolearningcenter/gettingstarted/enduser.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/gettingstarted/enduser.md rename to docs/endpointpolicymanager/components/devicemanager/videolearningcenter/gettingstarted/enduser.md diff --git a/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/gettingstarted/serialnumber.md b/docs/endpointpolicymanager/components/devicemanager/videolearningcenter/gettingstarted/serialnumber.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/gettingstarted/serialnumber.md rename to docs/endpointpolicymanager/components/devicemanager/videolearningcenter/gettingstarted/serialnumber.md diff --git a/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/gettingstarted/usbdrive.md b/docs/endpointpolicymanager/components/devicemanager/videolearningcenter/gettingstarted/usbdrive.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/gettingstarted/usbdrive.md rename to docs/endpointpolicymanager/components/devicemanager/videolearningcenter/gettingstarted/usbdrive.md diff --git a/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/gettingstarted/usbdriveallowuser.md b/docs/endpointpolicymanager/components/devicemanager/videolearningcenter/gettingstarted/usbdriveallowuser.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/gettingstarted/usbdriveallowuser.md rename to docs/endpointpolicymanager/components/devicemanager/videolearningcenter/gettingstarted/usbdriveallowuser.md diff --git a/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/gettingstarted/usbdriveallowvendor.md b/docs/endpointpolicymanager/components/devicemanager/videolearningcenter/gettingstarted/usbdriveallowvendor.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/gettingstarted/usbdriveallowvendor.md rename to docs/endpointpolicymanager/components/devicemanager/videolearningcenter/gettingstarted/usbdriveallowvendor.md diff --git a/docs/endpointpolicymanager/components/devicemanager/videolearningcenter/methods/_category_.json b/docs/endpointpolicymanager/components/devicemanager/videolearningcenter/methods/_category_.json new file mode 100644 index 0000000000..bf3482899d --- /dev/null +++ b/docs/endpointpolicymanager/components/devicemanager/videolearningcenter/methods/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Methods: Cloud, MDM and SCCM", + "position": 2, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/methods/cloud.md b/docs/endpointpolicymanager/components/devicemanager/videolearningcenter/methods/cloud.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/methods/cloud.md rename to docs/endpointpolicymanager/components/devicemanager/videolearningcenter/methods/cloud.md diff --git a/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/methods/mdm.md b/docs/endpointpolicymanager/components/devicemanager/videolearningcenter/methods/mdm.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/methods/mdm.md rename to docs/endpointpolicymanager/components/devicemanager/videolearningcenter/methods/mdm.md diff --git a/docs/endpointpolicymanager/components/devicemanager/videolearningcenter/videolearningcenter.md b/docs/endpointpolicymanager/components/devicemanager/videolearningcenter/videolearningcenter.md new file mode 100644 index 0000000000..6afd3638d4 --- /dev/null +++ b/docs/endpointpolicymanager/components/devicemanager/videolearningcenter/videolearningcenter.md @@ -0,0 +1,25 @@ +--- +title: Device Manager Videos +description: Video tutorials for Device Manager +--- + +# Device Manager Video Learning Center + +Learn Device Manager through video tutorials covering device policies, configuration, and enterprise deployment. + +## Video Categories + +- [Getting Started](gettingstarted) - Basic concepts and initial configuration +- [Methods: Cloud, MDM and SCCM](methods) - Deployment and management approaches + +## Featured Topics + +### Getting Started +Essential videos for administrators new to Device Manager, covering basic concepts and initial policy configuration. + +### Deployment Methods +Learn how to deploy and manage Device Manager policies using various enterprise management platforms. + +--- + +*All videos provide practical examples and step-by-step guidance for real-world implementations.* diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/_category_.json new file mode 100644 index 0000000000..b8243d3f7f --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Endpoint Privilege Manager", + "position": 5, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/_category_.json new file mode 100644 index 0000000000..d92c78eb54 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Knowledge Base", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "knowledgebase" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/eventing/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/eventing/_category_.json new file mode 100644 index 0000000000..63ef7864e4 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/eventing/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Eventing", + "position": 100, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/eventing/reports.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/eventing/reports.md new file mode 100644 index 0000000000..e4fd7805b6 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/eventing/reports.md @@ -0,0 +1,165 @@ +--- +title: "How to use Netwrix Auditor to Report on Endpoint Policy Manager events" +description: "How to use Netwrix Auditor to Report on Endpoint Policy Manager events" +sidebar_position: 20 +--- + +# How to use Netwrix Auditor to Report on Endpoint Policy Manager events + +This topic shows you how to generate reports for interesting events from the Endpoint Policy Manager +event logs, that you can then use to create LPM policies as needed. + +## Report + +![1325_1](/images/endpointpolicymanager/integration/auditor/1325_1.webp) + +Policy created in LPM using the report details above. + +![1325_2](/images/endpointpolicymanager/integration/auditor/1325_2.webp) + +## Getting Started + +In order to receive Endpoint Policy Manager reports for events via Netwrix Auditor, you need to +complete the following steps. + +**Step 1 –** Creating a monitoring plan for Endpoint Policy Manager events. + +**Step 2 –** Configuring sources, filters, events, database settings. + +**Step 3 –** Optional: configure alerts. + +## Creating a monitoring plan for Endpoint Policy Manager events + +Navigate to **Start** > Netwrix Auditor > Netwrix Auditor **Event Log Manager**. + +On the main page, you are prompted to select a monitoring plan. Click **Add** to add new plan. + +![1325_3](/images/endpointpolicymanager/integration/auditor/1325_3.webp) + +**Step 1 –** Give the new plan a descriptive name and select **Enable event log collection**. Then +add a **Notification recipient** email address. You can specify one or more email addresses for +users to receive daily Event Log collection status notifications. Use a semicolon to separate +addresses. + +![1325_4](/images/endpointpolicymanager/integration/auditor/1325_4.webp) + +**Step 2 –** In the **General** tab enter credentials for the account that will be used to collect +data from the endpoints. Use an account that has local admin rights on the endpoints, and one that +can also read Active directory. Then click the **Add** button next to the Monitored computers +section. + +![1325_5](/images/endpointpolicymanager/integration/auditor/1325_5.webp) + +**Step 3 –** Choose how you would like to add monitored computers, either by Computer name, by +Active Directory container, or via IP Range. + +![1325_6](/images/endpointpolicymanager/integration/auditor/1325_6.webp) + +:::note +You can add multiple types of computer items to your monitoring plan. +::: + + +![1325_7](/images/endpointpolicymanager/integration/auditor/1325_7.webp) + +**Step 4 –** In the **Notifications** tab you can configure SMTP settings. + +![1325_8](/images/endpointpolicymanager/integration/auditor/1325_8.webp) + +**Step 5 –** Under the **Audit Database** tab you can review and verify your database settings. +Netwrix Auditor Event Log Manager synchronizes Audit Database and reports settings with the default +Audit Database configuration from Netwrix Auditor Server. If this option is disabled, contact your +Netwrix Auditor Global administrator and make sure that these settings are properly configured in +Netwrix Auditor Server. See the Audit Database topic in the +[Netwrix Auditor > Configuration Documentation](https://helpcenter.netwrix.com/category/auditor_configuration) +for additional information. + +![1325_9](/images/endpointpolicymanager/integration/auditor/1325_9.webp) + +**Step 6 –** In the **Advanced** tab you can check if Network traffic compression is enabled +(recommended). Also, you can specify the notification delivery time. + +![1325_10](/images/endpointpolicymanager/integration/auditor/1325_10.webp) + +**Step 7 –** Filter out the desired events and get them into the Netwrix Auditor Reports. To do so, +get back to the **General** tab and configure the **Audit archiving filters**. + +![1325_11](/images/endpointpolicymanager/integration/auditor/1325_11.webp) + +**Step 8 –** Once there, you can add the filtering in the Inclusive filters section. Click **Add** +to proceed. + +In the next window, we need to specify the following parameters: + +- Filter name +- Description for the filter +- Event log – here we need to type in Endpoint Policy Manager manually, as it is not available in + the drop down list. +- Write to – here you can select the location to store filtered events, either a long-term archive + or a database. It is recommended to use both locations. + +![1325_12](/images/endpointpolicymanager/integration/auditor/1325_12.webp) + +**Step 9 –** Depending on targeted events, in the **Event Fields** tab you may enlist the event IDs +to capture. See the +[List of Endpoint Policy Manager Event Categories and IDs](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/eventcategories.md) topic for +additional information on event IDs. + +For example, here is the list of event IDs related to Endpoint Policy Manager Least Privilege +Manager Global Audit events: + +![1325_13](/images/endpointpolicymanager/integration/auditor/1325_13.webp) + +You may adjust the settings in the**Events Fields filtering** section according to your needs. + +Once the configuration is done, you may click **OK** and save all your progress so far. + +**Step 10 –** Go back to the main monitoring plan configuration window for Netwrix Auditor Event Log +Manager, and click **Configure** under alerts filtering: + +![1325_14](/images/endpointpolicymanager/integration/auditor/1325_14.webp) + +Then click **Add** to add a new alert. + +![1325_15](/images/endpointpolicymanager/integration/auditor/1325_15.webp) + +**Step 11 –** In the next window add alerts for any event IDs as needed using the screenshots below +as a guide. + +:::note +There is no need to configure anything under the **Insertion Strings** tab at this time. +::: + + +Single Event Alert Example: + +![1325_16](/images/endpointpolicymanager/integration/auditor/1325_16.webp) + +![1325_17](/images/endpointpolicymanager/integration/auditor/1325_17.webp) + +Group of Specific Events Alert Example: + +![1325_18](/images/endpointpolicymanager/integration/auditor/1325_18.webp) + +![1325_19](/images/endpointpolicymanager/integration/auditor/1325_19.webp) + +This is all the configuration required for Netwrix Auditor Event Log Manager to report on Endpoint +Policy Manager Events. + +**Step 12 –** Now, if you would like to review the event log reports, start the Netwrix Auditor +software and go to the **Reports** section. There, navigate to the following report path: +**Predefined** > **Windows Server**> **Event Log** > **All events by Computer** and click **View**. + +![1325_20](/images/endpointpolicymanager/integration/auditor/1325_20.webp) + +Here you can specify the conditions and filters to represent in the report, such as date range, +Event level etc. + +![1325_21](/images/endpointpolicymanager/integration/auditor/1325_21.webp) + +:::note +You can click on the interactive link in the **Date** column to see event details: +::: + + +![1325_22](/images/endpointpolicymanager/integration/auditor/1325_22.webp) diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/eventing/subprocesses.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/eventing/subprocesses.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/eventing/subprocesses.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/eventing/subprocesses.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/eventing/windowseventforwarding.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/eventing/windowseventforwarding.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/eventing/windowseventforwarding.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/eventing/windowseventforwarding.md diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/knowledgebase.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/knowledgebase.md new file mode 100644 index 0000000000..4167ef27d4 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/knowledgebase.md @@ -0,0 +1,94 @@ +--- +title: "Knowledge Base" +description: "Knowledge Base" +sidebar_position: 10 +--- + +# Knowledge Base + +See the following Knowledge Base articles for Least Privilege Manager. + +## Licensing + +- [What is the difference between Endpoint Privilege Manager Standard and Complete licenses?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/licensing/license.md) + +## Tips (How does PPLPM work?) + +- [Which account does an elevated process run within?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipspplpm/accountelevatedprocess.md) +- [Does Endpoint Privilege Manager block Macro attacks?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipspplpm/macroattacks.md) +- [How secure is it just to use the digital signature? Can someone spoof a digital signature?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipspplpm/digitalsignature.md) +- [Is Endpoint Privilege Manager compatible alongside an existing installation of Microsoft Applocker?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipspplpm/applocker.md) +- [How can I change the behavior of "Run as Admin" with Endpoint Privilege Manager and how has it changed from previous versions?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipspplpm/runasadmin.md) + +## Tips (Specific Workaround for Apps and Scenarios) + +- [How to create an LPM Policy for (SynTPEnh.exe) Synaptics Pointing Device Driver](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/synapticspointingdevicedriver.md) +- [Install Windows Fonts for users or Elevate end-users to install fonts themselves](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/installfonts.md) +- [How do I elevate MMC snap ins without granting administrative rights?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/mmcsnapin.md) +- [How do I use Least Privilege Manager to Elevate .reg files to allow import by standard users](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/registry.md) +- [How-to elevate Windows Defender Firewall in Endpoint Privilege Manager?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/windowsdefender.md) +- [How do I elevate installers that are classified as Installers but not Applications? Like Ninite, 7z, or Self-Extract?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/installers.md) +- [Allowing access/edit rights to specific files for standard users](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/editrights.md) +- [How to Elevate applications with a .application extension using Least Privilege Manager](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/applicationextension.md) +- [How do I elevate .MSP files such as Adobe Acrobat updates?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/mspfiles.md) +- [FTK Imager crashes with 'Server Busy' dialog box when "Image Mounting" while running elevated](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/serverbusy.md) + +## Tips (Files, Folders and Dialogs) + +- [How can I make all files in a folder, or all files in all recursive folders Elevated, Blocked, or Allow & Log?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsfilesfolders/allfiles.md) + +## Tips and SecureRun (TM) + +- [How can I allow "Inline commands" blocked by SecureRun when a random path or filename is created each time?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipssecurerun/allowinlinecommands.md) +- [How do I setup SecureRun when there are so many variables and still ensure my rules work no matter what version of the software I have I installed?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipssecurerun/setup.md) +- [When Endpoint Policy Manager SecureRun(TM) is turned on, PowerShell won't run. How can I re-enable this?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipssecurerun/enablepowershell.md) +- [What is the supported list of BLOCKED script types for Endpoint Policy Manager SecureRun™ ?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipssecurerun/blockedscripttypes.md) +- [How to run WebEx Meeting as regular user when SecureRun is enabled](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipssecurerun/webex.md) +- [How to install and run MYKI Password Manager as regular user when SecureRun is enabled](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipssecurerun/mykipasswordmanager.md) +- [How do I allow a Chrome extension blocked by SecureRun to be installed?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipssecurerun/chromeextension.md) +- [Least Privilege Manager and SecureRun Implementation Best Practices](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipssecurerun/bestpractices.md) +- [How does the option "Show Admin Approval dialog for untrusted application" in Admin Approval work?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipssecurerun/adminapprovalwork.md) + +## Tips for Admin Approval, Self Elevate, Apply on Demand, SecureCopy and UI Branding + +- [Can I use Endpoint Privilege Manager to LOWER / remove admin rights from Administrators from an application or process, like Internet Explorer?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsforadminapproval/reduceadminrights.md) +- [I elevated an application, but drag and drop between the elevated and other non-elevated applications isn't working anymore. What can I try?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsforadminapproval/dragdrop.md) +- [How do I use the Filter section in Endpoint Privilege Manager ?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsforadminapproval/scope.md) +- [How do I install an Active X control if it is not digitally signed?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsforadminapproval/activexcontrol.md) +- [How to Defend against malicious PowerShell attacks (DLLs)?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsforadminapproval/maliciousattacks.md) +- [How can I integrate Endpoint Privilege Manager and Servicenow (or any other help desk) via email?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsforadminapproval/servicenow.md) +- [Least Privilege Manager - How to create a Self-Elevation policy for local groups of Standalone computers](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsforadminapproval/selfelevation.md) +- [How does the "Show Pop-Up" message checkbox work along side "Force user re-authenticate" and "Justification text required" checkboxes?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsforadminapproval/optionsshowpopupmessage.md) +- [How does custom menu item text work after builds 23.8 and later?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsforadminapproval/custommenuitemtext.md) + +## Tips (Old, use only if asked) + +- [Endpoint Privilege Manager: How do I elevate single line commands (second batch file method)?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsold/singlelinecommands.md) +- [How to elevate Print driver installation using Endpoint Privilege Manager? (alternate method)](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsold/printerdriverinstall.md) + +## Troubleshooting + +- [What log can help me determine why an application (MSI, etc.) was ALLOWED, ELEVATED or BLOCKED?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/determinewhy.md) +- [Why doesn't Endpoint Privilege Manager work Windows 7 + SHA256 signed.JS and .VBS files ?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/supportedenvironments.md) +- [I want all the files in a folder to be ALLOWED when SecureRun is used. What is the correct syntax?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/correctsyntax.md) +- [If multiple Endpoint Privilege Manager rules would apply, which rule takes precedence?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/ruleprecedence.md) +- [How are DRIVE MAPS and UNC paths supported in Endpoint Privilege Manager?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/drivemaps.md) +- [Why does Endpoint Policy Manager SecureRun block "inline commands" and what can I do to overcome or revert the behavior ?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/inlinecommands.md) +- [How are wildcards supported when used with Path and Command-line arguments in Least Privilege Manager?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/wildcards.md) +- [How do I overcome OneDrive block prompts when SecureRun is on?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/onedrive.md) +- [Why is my File Info Deny rule for SQL MGMT Studio version 14.x and lower not working?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/ssms.md) +- [Why is my File Info Deny rule for WinSCP Setup 17.x and lower not working?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/winscp.md) +- [How-to Fix EXPLORER.EXE crash when right-clicking document files, pdf, docx, xlsx, etc.?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/explorercrash.md) +- [Error message The element 'emailSettings' in namespace "…AdminApproval" has incomplete content encountered when editing Admin Approval policy](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/emailsettings.md) +- [How-to troubleshoot LPM rules for Kaseya Agent Service?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/kaseyaagentservice.md) + +## Eventing + +- [How to forward interesting events for Least Privilege Manager (or anything else) to a centralized location using Windows Event Forwarding.](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/eventing/windowseventforwarding.md) +- [How to use Netwrix Auditor to Report on Endpoint Policy Manager events](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/eventing/reports.md) + +## Netwrix Privilege Secure for Access Management Integration + +- [How to Resolve Could not establish trust relationship for the SSL or TLS Secure Channel error message](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/netwrixprivilegesecure/establishtrust.md) +- [How does the Netwrix Privilege Secure MMC UI relate to the Endpoint Policy Manager MMC UI?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/netwrixprivilegesecure/mmc.md) +- [How can I create Endpoint Policy ManagerLeast Privilege Manager policies with Netwrix Privilege Secure (even when the Endpoint Policy Manager Client Side Extension is unlicensed?)](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/netwrixprivilegesecure/createpolicies.md) diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/licensing/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/licensing/_category_.json new file mode 100644 index 0000000000..13d08bae5f --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/licensing/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Licensing", + "position": 10, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/licensing/license.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/licensing/license.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/licensing/license.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/licensing/license.md diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/macintegration/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/macintegration/_category_.json new file mode 100644 index 0000000000..5d1c642ee9 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/macintegration/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Mac Integration", + "position": 80, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/macintegration/logs.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/macintegration/logs.md new file mode 100644 index 0000000000..db9aa76abe --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/macintegration/logs.md @@ -0,0 +1,162 @@ +--- +title: "Logging guide for Endpoint Privilege Manager for Mac Clients" +description: "Logging guide for Endpoint Privilege Manager for Mac Clients" +sidebar_position: 10 +--- + +# Logging guide for Endpoint Privilege Manager for Mac Clients + +This guide will help you understand local Mac logging and also how to send those logs to Netwrix +Endpoint Policy Manager (formerly PolicyPak) Cloud if desired. + +## Understanding log files on the client + +The Endpoint Policy Manager logs are located in /Library/Application Support/PolicyPak/Logs. If +requested by Support, zip up these three logs. As the customer, you can find useful information +within endpointpolicymanagerd.log and cloud.log (details below). + +![1329_1_6e10551394ec326177434ffc228df475](/images/endpointpolicymanager/leastprivilege/mac/1329_1_6e10551394ec326177434ffc228df475.webp) + +### Understanding Endpoint Policy ManagerD.Log + +This log shows every process that ran on the computer. When installed, Endpoint Policy Manager needs +to monitor all processes on the endpoint to determine if there is a policy against that process and +then acts upon it if necessary. This log shows those processes and the policy information, if there +is a policy. + +No Existing Policy + +![1329_2_d6a33d883a790b8367004838c34e770f](/images/endpointpolicymanager/leastprivilege/mac/1329_2_d6a33d883a790b8367004838c34e770f.webp) + +Policy Exists + +![1329_3_4b3667fda4b8ee8bc6b9d9a09ef88ee8](/images/endpointpolicymanager/leastprivilege/mac/1329_3_4b3667fda4b8ee8bc6b9d9a09ef88ee8.webp) + +### Understanding Cloud.log + +Cloud.log contains actioned items from the endpointpolicymanagerd.log file, processes that ran by the user and +were either Allowed, Elevated or Blocked by Endpoint Policy Manager policies. + +:::note +To get a better understanding of how you policies are working, or not working, +endpointpolicymanagerd.log will tell not only what processes were affected by policies, but also what processes +weren’t – and maybe should have been. +::: + + +![1329_4_30c21b2015b47e5d92143f82a31997eb](/images/endpointpolicymanager/leastprivilege/mac/1329_4_30c21b2015b47e5d92143f82a31997eb.webp) + +## Setting up Endpoint Policy Manager Cloud Groups for Event Collection + +Having these logs locally is all well and good, but we also have the ability to centrally store +these logs and present the data in a more readable format. + +Our Event Collector in the cloud can take these events, upload them to your Endpoint Policy Manager +cloud instance, and allow you to pull reports based on this data. + +:::note +This is a paid, extra service that is not enabled by default. +::: + + +Event collection is part of the Group configuration. There are two types of groups that your +endpoints can be a part of: Built-in and Company. + +Built-in + +Without going into too many details here (there are KB articles where you can get more information +on this topic), the main Built-in Group is the Allgroup. Every endpoint that has an account will +automatically be a member of Windows or, in this case, MacOSs All group. If this group is configured +with Event Collection, all endpoints will send their cloud.log data up to the cloud. + +Computer + +Computer groups are created and configured by you, the Endpoint Policy Manager cloud instance +administrator. You specify what computer accounts are members here, and thereby only those endpoints +will upload the data you specify in that group Event Collection configuration. + +There are a few ways to add a computer to a group, but the most common way is directly through the +group. + +**Step 1 –** Highlight the group you want to add the computer(s) to. + +**Step 2 –** Click on **Add/Remove Computer from Group** (under Actions). + +![1329_5_cd439679970dd94379dc97da3de13756](/images/endpointpolicymanager/leastprivilege/mac/1329_5_cd439679970dd94379dc97da3de13756.webp) + +**Step 3 –** Click **Available Computers**. + +![1329_6_89a9d67a0c348b5ab03d304ea9392884](/images/endpointpolicymanager/leastprivilege/mac/1329_6_89a9d67a0c348b5ab03d304ea9392884.webp) + +**Step 4 –** Check the ones to add and click **Add**. + +Event Collection Configuration + +To configure Event Collection, highlight the group and click **Edit Group** under Actions. On the +resulting pop-up window, click on the **Event Collector** tab. + +![1329_7_44a2bef19cdb90973520bb3702397eb4](/images/endpointpolicymanager/leastprivilege/mac/1329_7_44a2bef19cdb90973520bb3702397eb4.webp) + +The **Event submission interval** dictates how often the logs get uploaded to the cloud. This is +separate and distinct from the **Refresh interval for computers** on the previous tab, which +dictates how often the endpoint synchronizes the policies with the cloud. + +You can also choose which events are collected and stored in the cloud. On large networks, this will +save you from a lot of noise when looking for specific things. We generally recommend starting will +All events until you figure out what it is you want to see, and then just select the ones you want. + +When **Selected Events** is selected, clicking on the Info icon brings up a list of Event IDs that +can be selected. In the image below are highlighted the two Event types that shown in the cloud.log +example above. + +![1329_8_464e110a1254c22ecac8a612b13ffc76](/images/endpointpolicymanager/leastprivilege/mac/1329_8_464e110a1254c22ecac8a612b13ffc76.webp) + +Notes on Collection configuration: + +- When the Allgroup is configured, all endpoints will receive the configuration. +- When a Parent group is configured, all child groups will, by default, inherit the configuration as + well. This behavior, however, can be altered to block inheritance. +- If a computer is a member of multiple groups, the behavior is essentially accumulative. That is, + all selected IDs will be included and uploaded in the shortest interval set. + +See the +[How can I keep the same or specify different parameters for Event Collection for child groups? How does a computer behave if a member of multiple groups?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/eventcollection/childgroups.md) +topic for additional information. + +Forcing Event submission + +If you are testing, or just want to upload the data immediately, you can force the upload of the +cloud.log file with the following command: + +`policypak cloud-push-logs` + +![1329_9_e5dddf2ba28a115aa5782c49a21fbac6](/images/endpointpolicymanager/leastprivilege/mac/1329_9_e5dddf2ba28a115aa5782c49a21fbac6.webp) + +:::note +This command can be run by a standard user. It does not require elevated or administrative +rights to perform. +::: + + +## Reporting on Collected Events + +All the collected events can be accessed through the **Computers (Collected Events)** report on the +Reports tab and selecting **Endpoint Policy Manager Least Privilege Manager for macOS**. + +![1329_10_2ab64dc549729d2f51cdf61ab7d88108](/images/endpointpolicymanager/leastprivilege/mac/1329_10_2ab64dc549729d2f51cdf61ab7d88108.webp) + +Next, configure the time period you want to report on. The default is the beginning of the day, but +this can be altered to the desired start and stop time and date. Click **Show** to see the results. + +![1329_11_7135ed6ab54692983796dd995a2517e4](/images/endpointpolicymanager/leastprivilege/mac/1329_11_7135ed6ab54692983796dd995a2517e4.webp) + +The results can be filtered to show only the desired information. For example, show only specific +computers or only Elevation events. Every column can be filtered by clicking on the ellipsis within +the column header. + +![1329_12_3996f6bea2016ba07eaf96f5c05b43c0](/images/endpointpolicymanager/leastprivilege/mac/1329_12_3996f6bea2016ba07eaf96f5c05b43c0.webp) + +For offline analysis, the report can be exported to either Excel or, if very large, CSV format. This +can be done before or after filtering. + +![1329_13_50b225886bba8747a9460411f4662cc9](/images/endpointpolicymanager/leastprivilege/mac/1329_13_50b225886bba8747a9460411f4662cc9.webp) diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/netwrixprivilegesecure/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/netwrixprivilegesecure/_category_.json new file mode 100644 index 0000000000..e3ac45d5cb --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/netwrixprivilegesecure/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Netwrix Privilege Secure For Access Management Integration", + "position": 110, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/netwrixprivilegesecure/createpolicies.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/netwrixprivilegesecure/createpolicies.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/netwrixprivilegesecure/createpolicies.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/netwrixprivilegesecure/createpolicies.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/netwrixprivilegesecure/establishtrust.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/netwrixprivilegesecure/establishtrust.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/netwrixprivilegesecure/establishtrust.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/netwrixprivilegesecure/establishtrust.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/netwrixprivilegesecure/mmc.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/netwrixprivilegesecure/mmc.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/netwrixprivilegesecure/mmc.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/netwrixprivilegesecure/mmc.md diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/_category_.json new file mode 100644 index 0000000000..5750619566 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Tips (Specific Workaround For Apps And Scenarios)", + "position": 30, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/applicationextension.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/applicationextension.md similarity index 98% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/applicationextension.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/applicationextension.md index 8adb7fdc38..9e47f5ac29 100644 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/applicationextension.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/applicationextension.md @@ -21,7 +21,7 @@ blocked. :::note The more conditions evaluated, the more secure the rule will be. See this video for more details: -[Best Practices for Elevating User-Based Installs](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/elevatinguserbasedinstalls.md) +[Best Practices for Elevating User-Based Installs](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/elevatinguserbasedinstalls.md) ::: diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/block.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/block.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/block.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/block.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/editrights.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/editrights.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/editrights.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/editrights.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/installers.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/installers.md similarity index 93% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/installers.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/installers.md index 20f80277cf..d880f1f25f 100644 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/installers.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/installers.md @@ -20,7 +20,7 @@ Default keywords are **Setup**, **Installer**, **Install**, **Upgrade**, **Updat You can extend this list by enabling the Endpoint Policy Manager ADMX setting and entering required keywords. If you don't know how to enable Endpoint Policy Manager ADMX settings then see this link: -[Troubleshooting with ADMX files](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/admxfiles.md) +[Troubleshooting with ADMX files](/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/admxfiles.md) In this example we are going to show you how to set Ninite installer as an elevated Application Executable. diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/installfonts.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/installfonts.md similarity index 99% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/installfonts.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/installfonts.md index dea5eaff8f..94337c1e46 100644 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/installfonts.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/installfonts.md @@ -34,7 +34,7 @@ shown below. **Step 6 –** Run `GPUPDATE `on the client machine and verify the results. You can also view theabove steps in this video: -[Enable end-users to install their own fonts](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/installfonts.md) +[Enable end-users to install their own fonts](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/installfonts.md) ## Installing fonts for end-users (FOR ADMINS) diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/mmcsnapin.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/mmcsnapin.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/mmcsnapin.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/mmcsnapin.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/mspfiles.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/mspfiles.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/mspfiles.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/mspfiles.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/nonadminuser.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/nonadminuser.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/nonadminuser.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/nonadminuser.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/registry.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/registry.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/registry.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/registry.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/serverbusy.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/serverbusy.md similarity index 97% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/serverbusy.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/serverbusy.md index 07c296b95f..4e96c79a95 100644 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/serverbusy.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/serverbusy.md @@ -25,7 +25,7 @@ This checked by default to prevent users from gaining unauthorized administrativ Open/Save dialog box to their endpoint. Unchecked, you open up the possibility for a knowledgeable operator to gain administrative access to the computer. For more information in this, please refer to this KB video -->[Increase security by reducing rights on Open/Save dialogs](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/opensavedialogs.md) +->[Increase security by reducing rights on Open/Save dialogs](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/opensavedialogs.md) ## Optional diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/synapticspointingdevicedriver.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/synapticspointingdevicedriver.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/synapticspointingdevicedriver.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/synapticspointingdevicedriver.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/uipathassistant.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/uipathassistant.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/uipathassistant.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/uipathassistant.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/windowsdefender.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/windowsdefender.md similarity index 96% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/windowsdefender.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/windowsdefender.md index 853dcb269e..4c416c1ba3 100644 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/windowsdefender.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/windowsdefender.md @@ -10,7 +10,7 @@ sidebar_position: 50 For detailed steps on how to elevate the Windows Defender Firewall snap-in, replacing Services.msc with WF.msc, see -[How do I elevate MMC snap ins without granting administrative rights?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/mmcsnapin.md) +[How do I elevate MMC snap ins without granting administrative rights?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsappsscenarios/mmcsnapin.md) ## Option 2: diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsfilesfolders/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsfilesfolders/_category_.json new file mode 100644 index 0000000000..c62d21dc98 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsfilesfolders/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Tips (Files Folders And Dialogs)", + "position": 40, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsfilesfolders/allfiles.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsfilesfolders/allfiles.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsfilesfolders/allfiles.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsfilesfolders/allfiles.md diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsforadminapproval/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsforadminapproval/_category_.json new file mode 100644 index 0000000000..9e1992f399 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsforadminapproval/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Tips For Admin Approval Self Elevate Apply On Demand SecureCopy And UI Branding", + "position": 60, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsforadminapproval/activexcontrol.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsforadminapproval/activexcontrol.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsforadminapproval/activexcontrol.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsforadminapproval/activexcontrol.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsforadminapproval/custommenuitemtext.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsforadminapproval/custommenuitemtext.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsforadminapproval/custommenuitemtext.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsforadminapproval/custommenuitemtext.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsforadminapproval/dragdrop.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsforadminapproval/dragdrop.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsforadminapproval/dragdrop.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsforadminapproval/dragdrop.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsforadminapproval/maliciousattacks.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsforadminapproval/maliciousattacks.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsforadminapproval/maliciousattacks.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsforadminapproval/maliciousattacks.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsforadminapproval/optionsshowpopupmessage.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsforadminapproval/optionsshowpopupmessage.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsforadminapproval/optionsshowpopupmessage.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsforadminapproval/optionsshowpopupmessage.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsforadminapproval/reduceadminrights.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsforadminapproval/reduceadminrights.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsforadminapproval/reduceadminrights.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsforadminapproval/reduceadminrights.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsforadminapproval/scope.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsforadminapproval/scope.md similarity index 97% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsforadminapproval/scope.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsforadminapproval/scope.md index 719c96c587..0cd0eb2707 100644 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsforadminapproval/scope.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsforadminapproval/scope.md @@ -73,7 +73,7 @@ its work as LOCAL SYSTEM and tries to run an un-trusted file. Therefore, when th list, the attack attempt will fail. For a video demo of this scenario, -see [SecureRun to block User AND System executables](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/usersystemexecutables.md) +see [SecureRun to block User AND System executables](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/usersystemexecutables.md) ## Scenario 2: Specific rule to block an app from being run, even as local System. @@ -111,7 +111,7 @@ Result: ![319_11_faq-img-11_950x375](/images/endpointpolicymanager/leastprivilege/policyeditor/319_11_faq-img-11_950x375.webp) For more information on this issue, see - [Block PowerShell in General, Open up for specific items](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/powershellblock.md) + [Block PowerShell in General, Open up for specific items](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/powershellblock.md) ## Scenario 3: Running or Elevating applications or installers, but blocking other admins from running them. @@ -146,7 +146,7 @@ done on the user or computer side, like this: ![319_14_faq-img-14_950x458](/images/endpointpolicymanager/leastprivilege/policyeditor/319_14_faq-img-14_950x458.webp) video -3: [Elevate apps as standard user, BLOCK other Admins](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/appblock.md) +3: [Elevate apps as standard user, BLOCK other Admins](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/appblock.md) ## Scenario 4:  Elevating a Service account @@ -184,4 +184,4 @@ that run from the specified `.exe `regardless of the user. ![319_15_faq-img-15_950x467](/images/endpointpolicymanager/leastprivilege/policyeditor/319_15_faq-img-15_950x467.webp) video: -[Reduce or specify Service Account Rights](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/serviceaccountrights.md) +[Reduce or specify Service Account Rights](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/serviceaccountrights.md) diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsforadminapproval/selfelevation.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsforadminapproval/selfelevation.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsforadminapproval/selfelevation.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsforadminapproval/selfelevation.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsforadminapproval/servicenow.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsforadminapproval/servicenow.md similarity index 92% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsforadminapproval/servicenow.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsforadminapproval/servicenow.md index 825bd86e4d..565abe755b 100644 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsforadminapproval/servicenow.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsforadminapproval/servicenow.md @@ -7,7 +7,7 @@ sidebar_position: 60 # How can I integrate Endpoint Privilege Manager and Servicenow (or any other help desk) via email? Please consider watching this video before continuing: -[Using Email / Long Codes](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/longcodes.md) +[Using Email / Long Codes](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/longcodes.md) Netwrix Endpoint Policy Manager (formerly PolicyPak) doesn't have an API integration with Servicenow, but you can make a nice workflow with Endpoint Policy Manager Least Privilege Manager diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsold/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsold/_category_.json new file mode 100644 index 0000000000..8cbbb17631 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsold/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Tips (Old Use Only If Asked)", + "position": 70, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsold/printerdriverinstall.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsold/printerdriverinstall.md similarity index 86% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsold/printerdriverinstall.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsold/printerdriverinstall.md index 9382c79e28..0ee19b59f0 100644 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsold/printerdriverinstall.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsold/printerdriverinstall.md @@ -10,11 +10,11 @@ These directions should only be performed if asked by support. The normal method driver installation is to use the Netwrix Endpoint Policy Manager (formerly PolicyPak) Helper tools. The following videos provide you with step by step instructions: -- [Overcome Network Card, Printer, and Remove Programs UAC prompts](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/helperstoolsandtips/uacprompts.md) -- [Endpoint Policy Manager Least Priv Manager Tools Setup](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/helperstoolsandtips/toolssetup.md) -- [Getting the helper tools as desktop shortcuts](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/helperstoolsandtips/helperdesktopshortcut.md) -- [Endpoint Privilege Manager: Install Printers via Native NTPRINT Dialog](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/helperstoolsandtips/ntprintdialog.md) -- [Endpoint Privilege Manager: Edit IP SETTINGS EDIT VIA WIN GUI](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/helperstoolsandtips/wingui.md) +- [Overcome Network Card, Printer, and Remove Programs UAC prompts](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/helperstoolsandtips/uacprompts.md) +- [Endpoint Policy Manager Least Priv Manager Tools Setup](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/helperstoolsandtips/toolssetup.md) +- [Getting the helper tools as desktop shortcuts](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/helperstoolsandtips/helperdesktopshortcut.md) +- [Endpoint Privilege Manager: Install Printers via Native NTPRINT Dialog](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/helperstoolsandtips/ntprintdialog.md) +- [Endpoint Privilege Manager: Edit IP SETTINGS EDIT VIA WIN GUI](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/helperstoolsandtips/wingui.md) Printui.dll is the executable file that contains the functions to install a Print driver. Currently Endpoint Policy Manager can elevate a Control Panel applet, and it can be `.CPL` or `.DLL` files. diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsold/singlelinecommands.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsold/singlelinecommands.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsold/singlelinecommands.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsold/singlelinecommands.md diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipspplpm/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipspplpm/_category_.json new file mode 100644 index 0000000000..f8e81677a8 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipspplpm/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Tips (How Does PPLPM Work)", + "position": 20, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipspplpm/accountelevatedprocess.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipspplpm/accountelevatedprocess.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipspplpm/accountelevatedprocess.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipspplpm/accountelevatedprocess.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipspplpm/applocker.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipspplpm/applocker.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipspplpm/applocker.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipspplpm/applocker.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipspplpm/digitalsignature.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipspplpm/digitalsignature.md similarity index 93% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipspplpm/digitalsignature.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipspplpm/digitalsignature.md index 0f5d537921..1aa6669a7c 100644 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipspplpm/digitalsignature.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipspplpm/digitalsignature.md @@ -10,7 +10,7 @@ Digital Signature is signed by the application vendor and it is nearly impossibl malicious content with a valid digital signature of a known application like Autodesk, Adob, etc. However, we strongly suggest securing your environment with combo rules like **Signature** with **File Info**. For more information on this topic please check this link -[More security with Combo Rules](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/securitycomborules.md). +[More security with Combo Rules](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/securitycomborules.md). Certificates are generated by CA (Certification authority), such as Thawte, DigiCert, etc. Though it is possible and valid to generate more than one certificate with the same Subject Name, all trusted diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipspplpm/macroattacks.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipspplpm/macroattacks.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipspplpm/macroattacks.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipspplpm/macroattacks.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipspplpm/runasadmin.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipspplpm/runasadmin.md similarity index 95% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipspplpm/runasadmin.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipspplpm/runasadmin.md index 0f94fc84c2..1f93b3951c 100644 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipspplpm/runasadmin.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipspplpm/runasadmin.md @@ -11,9 +11,9 @@ users to elevate the native printers’ dialog, known as elevating NTPRINT.EXE, Windows Settings control (SystemSettingsAdminFlows.exe). You can review examples of these changes in these two videos: -[Endpoint Privilege Manager: Install Printers via Native NTPRINT Dialog](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/helperstoolsandtips/ntprintdialog.md) +[Endpoint Privilege Manager: Install Printers via Native NTPRINT Dialog](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/helperstoolsandtips/ntprintdialog.md) -[Endpoint Privilege Manager: Edit IP SETTINGS EDIT VIA WIN GUI](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/helperstoolsandtips/wingui.md) +[Endpoint Privilege Manager: Edit IP SETTINGS EDIT VIA WIN GUI](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/helperstoolsandtips/wingui.md) When we added this functionality, we also had to also change the behavior for any explicit elevation request normally handled by **Run As Administrator** requests. @@ -21,7 +21,7 @@ request normally handled by **Run As Administrator** requests. Starting in Endpoint Policy Manager CSE 3425, you can modify the Run As Administrator behavior depending on the goal you would like to accomplish. You can use Endpoint Policy Manager ADMX settings to control it. Use this reference to get familiar with the Endpoint Policy Manager ADMX -first: [Troubleshooting with ADMX files](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/admxfiles.md) +first: [Troubleshooting with ADMX files](/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/admxfiles.md) ![862_1_image-20230228200619-1_950x319](/images/endpointpolicymanager/leastprivilege/862_1_image-20230228200619-1_950x319.webp) @@ -87,7 +87,7 @@ legacy Printer elevation method within “Endpoint Policy Manager Helper Tools operations in this mode, because it doesn’t rely on the updated functionality to perform elevation directly upon NTPRINT.EXE. To see the Endpoint Policy Manager Helper Tools in action to add printers, please refer to these videos: Least Privilege Manager > -[Video Learning Center](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/videolearningcenter.md). +[Video Learning Center](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/videolearningcenter.md). ::: diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipssecurerun/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipssecurerun/_category_.json new file mode 100644 index 0000000000..5a80a3a135 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipssecurerun/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Tips And SecureRun (TM)", + "position": 50, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/adminapprovalwork.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipssecurerun/adminapprovalwork.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/adminapprovalwork.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipssecurerun/adminapprovalwork.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/allowinlinecommands.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipssecurerun/allowinlinecommands.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/allowinlinecommands.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipssecurerun/allowinlinecommands.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/bestpractices.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipssecurerun/bestpractices.md similarity index 88% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/bestpractices.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipssecurerun/bestpractices.md index acbe7c97d7..171068037e 100644 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/bestpractices.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipssecurerun/bestpractices.md @@ -21,10 +21,10 @@ interact with any applications on the endpoint, so it can safely be distributed as you see fit. For more information on Using Global Settings Policy, see -[Use Discovery to know what rules to make as you transition from Local Admin rights](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/discovery.md) +[Use Discovery to know what rules to make as you transition from Local Admin rights](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/eventing/discovery.md) For more information on using the Global Settings audit events to create LPM Policies, see -[Auto-Create Policy from Global Audit event](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/globalauditevent.md) +[Auto-Create Policy from Global Audit event](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/eventing/globalauditevent.md) ## Auto Rules Generator @@ -36,7 +36,7 @@ to run through SecureRun. It will create the required allow and elevate policies create policies to block applications that would otherwise be automatically allowed. For more information on using the Auto-Rules Generator Tool, see -[Auto Rules Generator Tool (with SecureRun)](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/autorulesgeneratortool.md) +[Auto Rules Generator Tool (with SecureRun)](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/autorulesgeneratortool.md) ## Post-installation Options @@ -51,7 +51,7 @@ Instead of an outright denial, the end-user is presented with a request code. Wh administrator, a response code can be created to allow the process to run. This can allow infrequent or new processes to be run without a specific rule being created. -[Admin Approval demo](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/demo.md) +[Admin Approval demo](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/demo.md) ### Self Elevation @@ -60,4 +60,4 @@ specific policy. You can be specific to whom this is allowed, and for what types each time this is invoked, it is logged in the event log along with the option of requiring the user's justification for running the process -For more information, see [Self Elevate Mode](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/demo.md) +For more information, see [Self Elevate Mode](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/demo.md) diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/blockedscripttypes.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipssecurerun/blockedscripttypes.md similarity index 92% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/blockedscripttypes.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipssecurerun/blockedscripttypes.md index a8eceaa43a..1d97ca5187 100644 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/blockedscripttypes.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipssecurerun/blockedscripttypes.md @@ -20,6 +20,6 @@ The official list is as follows and might increase without notice. :::note For .PS1, in order to enable Powershell at all, you need to make an express (ALLOW rule for powershell.exe). That rule can be found in -[When Endpoint Policy Manager SecureRun(TM) is turned on, PowerShell won't run. How can I re-enable this?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/enablepowershell.md) +[When Endpoint Policy Manager SecureRun(TM) is turned on, PowerShell won't run. How can I re-enable this?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipssecurerun/enablepowershell.md) ::: diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/chromeextension.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipssecurerun/chromeextension.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/chromeextension.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipssecurerun/chromeextension.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/enablepowershell.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipssecurerun/enablepowershell.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/enablepowershell.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipssecurerun/enablepowershell.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/mykipasswordmanager.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipssecurerun/mykipasswordmanager.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/mykipasswordmanager.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipssecurerun/mykipasswordmanager.md diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipssecurerun/setup.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipssecurerun/setup.md new file mode 100644 index 0000000000..e760837c0d --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipssecurerun/setup.md @@ -0,0 +1,55 @@ +--- +title: "How do I setup SecureRun when there are so many variables and still ensure my rules work no matter what version of the software I have I installed?" +description: "How do I setup SecureRun when there are so many variables and still ensure my rules work no matter what version of the software I have I installed?" +sidebar_position: 20 +--- + +# How do I setup SecureRun when there are so many variables and still ensure my rules work no matter what version of the software I have I installed? + +### Using Secure Run – Best Practices + +#### Getting Started + +Watch this quick video for tips on setting up Secure Run: +[Stop Ransomware and other unknown zero day attacks with Endpoint Policy Manager SecureRun(TM)](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/stopransomware.md). + +In addition we have a tool called Auto Rules Generator for generating rules from a machine that has +all your apps. It is in the Extras folder of the main Netwrix Endpoint Policy Manager (formerly +PolicyPak) download. For more information on this issue, please see +[Auto Rules Generator Tool (with SecureRun)](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/autorulesgeneratortool.md). + +#### How do we setup SecureRun when each version of the software references more than one .exe to start the program? + +- There is the option to **Apply to Child Processes**. In most cases this will elevate any other + processes needed. +- If you do not use this option, you have to create rules for each process. But you can use the Auto + Rules Generator to find all those .exe's and generate rules for all quickly. + +![315_1_lpm-faq-03-img-01](/images/endpointpolicymanager/leastprivilege/securerun/315_1_lpm-faq-03-img-01.webp) + +#### How do we setup SecureRun when there are so many variables and make them work no matter what version of the software was installed? + +- Start with the AutoRules Generator to try to mass generate the rules you need. +- In You can do a Single rule or a Combo + +![315_2_lpm-faq-03-img-02](/images/endpointpolicymanager/leastprivilege/securerun/315_2_lpm-faq-03-img-02.webp) + +- For a Single many customers will use Hashto ensure only that specific file is elevated. However + this doesn't allow for future versions to be allowed. +- For future proof situations, a Combo of a **Signature**, along with **File Info**, is often used. + That way you ensure that it is always that Vendor with the Signature, and with File Info you can + specify to allow Higher or Equals, thereby allowing future versions to be elevated. + +![315_3_lpm-faq-03-img-03](/images/endpointpolicymanager/leastprivilege/securerun/315_3_lpm-faq-03-img-03.webp) + +![315_4_lpm-faq-03-img-04](/images/endpointpolicymanager/leastprivilege/securerun/315_4_lpm-faq-03-img-04.webp) + +### Summary + +There are various ways to slice and dice to create the rules you want, but most common is to use +**Signature** with **File Info** set to Higher or Equals and, optionally Path with just filename +entered (though if the app changes names often you might omit using the Path). + +The more rule types you use the more secure it becomes, but keeping it usable is always the goal. +Generally only use Hash by itself because its pretty secure, and then some combination of the others +as noted above. diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/webex.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipssecurerun/webex.md similarity index 98% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/webex.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipssecurerun/webex.md index d087106c7c..d96123a9bb 100644 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/webex.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipssecurerun/webex.md @@ -83,7 +83,7 @@ steps. :::note You can also use Endpoint Policy Manager Remote Work Delivery Manager to deliver the certificate file at the desired location of the remote computer. For more information on this issue, -please see  Remote Work Delivery Manager > [Knowledge Base](/docs/endpointpolicymanager/knowledgebase/knowledgebase.md) +please see  Remote Work Delivery Manager > [Knowledge Base](/docs/endpointpolicymanager/) ::: diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/_category_.json new file mode 100644 index 0000000000..1947d1beae --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Troubleshooting", + "position": 90, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/correctsyntax.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/correctsyntax.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/correctsyntax.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/correctsyntax.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/determinewhy.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/determinewhy.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/determinewhy.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/determinewhy.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/drivemaps.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/drivemaps.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/drivemaps.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/drivemaps.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/emailsettings.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/emailsettings.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/emailsettings.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/emailsettings.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/explorercrash.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/explorercrash.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/explorercrash.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/explorercrash.md diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/inlinecommands.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/inlinecommands.md new file mode 100644 index 0000000000..53feefb6df --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/inlinecommands.md @@ -0,0 +1,100 @@ +--- +title: "Why does Endpoint Policy Manager SecureRun block \"inline commands\" and what can I do to overcome or revert the behavior ?" +description: "Why does Endpoint Policy Manager SecureRun block \"inline commands\" and what can I do to overcome or revert the behavior ?" +sidebar_position: 70 +--- + +# Why does Endpoint Policy Manager SecureRun block "inline commands" and what can I do to overcome or revert the behavior ? + +Windows operations like Command Prompt and PowerShell allow scripts to run. That is, they allow to +run various commands and NOT just executables (e.g. .exe files). + +Netwrix Endpoint Policy Manager (formerly PolicyPak) SecureRun automatically blocks unknown and +un-trusted scripts. You can read about these automatically blocked script types here: + +[What is the supported list of BLOCKED script types for Endpoint Policy Manager SecureRun™ ?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipssecurerun/blockedscripttypes.md) + +But it's possible to pass the commands on the command line + +For example, one can run something like this from the Run dialog (or in many other ways.) + +``` +cmd /c "mkdir C:\TEST & copy c:\Windows\notepad.exe C:\TEST" +``` + +![538_1_image-20201215000203-1](/images/endpointpolicymanager/leastprivilege/securerun/securerun_and_inline_commands.webp) + +Normally, users don't do this. But it could be valid during an application installation or program +setup. + +This technique is essentially what is used in much modern malware, as seen in this diagram. + +![538_2_image-20201215000203-2](/images/endpointpolicymanager/troubleshooting/leastprivilege/securerun/538_2_image-20201215000203-2.webp) + +When commands are run in this way, Endpoint Policy Manager SecureRun cannot know precisely what to +do. + +Remember that SecureRun's primary duty is to check "File Owner." And, since this inline command has +no owner, Endpoint Policy Manager SecureRun cannot make a definitive determination of "Should it run +or not?" + +In older versions of Endpoint Policy Manager, Endpoint Policy Manager Least Privilege Manager +SecureRun™ did not trap for these inline commands or make any determination. + +In current versions, Endpoint Policy Manager, Endpoint Policy Manager Least Privilege Manager +SecureRun™ assumes this behavior of inline commands should be interpreted as unexpected/bad +behavior. + +That being said, you might have a reliance on this behavior for an application setup or valid +process. As such you have three options as workarounds. + +## Option 1: Analyze the statement and create an explicit Allow and Log Rule (Most Secure) + +In this example, assume you determined you had an inline command you needed to explicitly overcome a +SecureRun block: + +``` +cmd /c "mkdir C:\TEST & copy c:\Windows\notepad.exe C:\TEST" +``` + +To overcome this, you would need to make an Executable rule (not a Script rule). You would specify a +Combo rule, then specify Path and Command Line Arguments like what's seen here. + +![538_3_image-20201215000203-3](/images/endpointpolicymanager/troubleshooting/leastprivilege/securerun/538_3_image-20201215000203-3.webp) + +The Path Condition part would be CMD.EXE: + +![538_4_image-20201215000203-4](/images/endpointpolicymanager/troubleshooting/leastprivilege/securerun/538_4_image-20201215000203-4.webp) + +Then the most secure would be "Strict equality" and then specify the arguments which make up the +remainder of the command. + +Note that other configurations may work, but only "Strict equality" would be the most secure. + +![538_5_image-20201215000203-5](/images/endpointpolicymanager/troubleshooting/leastprivilege/securerun/538_5_image-20201215000203-5.webp) + +Finally, set Allow And Log. + +![538_6_image-20201215000203-6](/images/endpointpolicymanager/troubleshooting/leastprivilege/securerun/538_6_image-20201215000203-6.webp) + +Now you have a rule which is explicitly enabled to overcome a SecureRun block. + +## Option 2: Explicitly set Endpoint Policy Manager SecureRun to Disabled (Least Secure; not recommended) + +If Endpoint Policy Manager SecureRun has no configuration or is explicitly Disabled, like what's +seen here, then the inline checking will not function. + +![538_7_image-20201215000203-7](/images/endpointpolicymanager/troubleshooting/leastprivilege/securerun/538_7_image-20201215000203-7.webp) + +## Option 3: Universally revert Endpoint Privilege Manager SecureRun™ Inline Command Processing Behavior to bypass inline commands (Less Secure; possibly recommended) + +In Endpoint Policy Manager CSE build 2725 we have introduced an ADMX setting entitled "Use legacy +(less secure) Endpoint Policy Manager Least Privilege Manager SecureRun Inline Processing Method." + +When this value is set to Enabled, you are telling the Endpoint Policy Manager Least Privilege +Manager that you want the SecureRun behavior to be reverted back to the original behavior. + +In this method, the Endpoint Policy Manager Least Privilege Manager SecureRun commandline parser +will ignore inline commands, and all processes like this will continue. + +![538_8_hfkb-1008-img-op-03-01_1379x575](/images/endpointpolicymanager/troubleshooting/leastprivilege/securerun/538_8_hfkb-1008-img-op-03-01_1379x575.webp) diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/kaseyaagentservice.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/kaseyaagentservice.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/kaseyaagentservice.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/kaseyaagentservice.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/onedrive.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/onedrive.md similarity index 98% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/onedrive.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/onedrive.md index 108b9dc84e..6acf567a09 100644 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/onedrive.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/onedrive.md @@ -83,4 +83,4 @@ We've combined known command-line args in that XML guidance, as shown in below s But if you're receiving a different command-line prompt then check the following KB for more help: -[How are wildcards supported when used with Path and Command-line arguments in Least Privilege Manager?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/wildcards.md) +[How are wildcards supported when used with Path and Command-line arguments in Least Privilege Manager?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/wildcards.md) diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/restorecontextmenu.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/restorecontextmenu.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/restorecontextmenu.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/restorecontextmenu.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/ruleprecedence.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/ruleprecedence.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/ruleprecedence.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/ruleprecedence.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/ruleproductinfo.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/ruleproductinfo.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/ruleproductinfo.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/ruleproductinfo.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/sage50.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/sage50.md similarity index 92% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/sage50.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/sage50.md index 4cc0d898c9..62b6e8d2ec 100644 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/sage50.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/sage50.md @@ -11,7 +11,7 @@ which is downloadable in the Netwrix Endpoint Policy Manager (formerly PolicyPak Use this video to see how to get the guidance and use the XML file we've pre-created: -[Installing applications-and-Preconfigured-Rules](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/installapplications.md) +[Installing applications-and-Preconfigured-Rules](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/installapplications.md) That being said the same customer reported that when opening a report, Sage will hang for several minutes while attempting to "Look for a printer." @@ -22,7 +22,7 @@ The customer's own remediation was to elevate the Print spooler also needs to be However, this is likely more than required, and instead, we would advise to merely attempt to change the integrity level of the spooler using these directions: -[I elevated an application, but drag and drop between the elevated and other non-elevated applications isn't working anymore. What can I try?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsforadminapproval/dragdrop.md) +[I elevated an application, but drag and drop between the elevated and other non-elevated applications isn't working anymore. What can I try?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsforadminapproval/dragdrop.md) Both avenues to adjust the spooler service are "use at your own risk." diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/ssms.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/ssms.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/ssms.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/ssms.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/supportedenvironments.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/supportedenvironments.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/supportedenvironments.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/supportedenvironments.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/wildcards.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/wildcards.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/wildcards.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/wildcards.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/winscp.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/winscp.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/winscp.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/winscp.md diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/_category_.json new file mode 100644 index 0000000000..872eac79bd --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Manual", + "position": 1, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/_category_.json new file mode 100644 index 0000000000..6c60b1be3d --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Endpoint Privilege Manager (MacOS using EPM Cloud)", + "position": 30, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/applicationlaunch.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/applicationlaunch.md new file mode 100644 index 0000000000..eff8d31ebc --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/applicationlaunch.md @@ -0,0 +1,35 @@ +--- +title: "Using MacOS + Admin Approval (aka Application Launch + Challenge)" +description: "Using MacOS + Admin Approval (aka Application Launch + Challenge)" +sidebar_position: 30 +--- + +# Using MacOS + Admin Approval (aka Application Launch + Challenge) + +:::note +See the +[Endpoint Policy Manager for Mac and Admin Approval](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/adminapproval.md) +video for an overview of this section. +::: + + +You might want users to only be able to run applications (normally or those which require admin +rights) only when approved. With the Admin Approval function you can do just that. + +Refer back to the Application Launch section earlier and make a matching rule. For instance, you +might want to make a matching rule for Firefox Browser.  You may need multiple rules if a product +has multiple executables. + +![A screen shot of a computer Description automatically generated](/images/endpointpolicymanager/mac/using_macos_admin_approval.webp) + +![A computer screen with a screen showing a login page Description automatically generated](/images/endpointpolicymanager/mac/using_macos_admin_approval_1.webp) + +:::note +The Endpoint Policy Manager Least Privilege Admin Approval tool for Windows must be used +to perform approval requests. +::: + + +The following options are honored in the Mac (and Windows) client: + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/mac/using_macos_admin_approval_2.webp) diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/installclient.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/installclient.md new file mode 100644 index 0000000000..c15db1f8b4 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/installclient.md @@ -0,0 +1,49 @@ +--- +title: "How to Install the Endpoint Policy Manager MacOS Client" +description: "How to Install the Endpoint Policy Manager MacOS Client" +sidebar_position: 10 +--- + +# How to Install the Endpoint Policy Manager MacOS Client + +After logging into Endpoint Policy Manager Cloud, head to Company Details, locate Download PolicyPak +Cloud Client for MacOS Installer, and follow the directions. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/mac/how_to_install_the_endpointpolicymanager.webp) + +Then follow the directions on the Mac and the Endpoint Policy Manager Least Privilege Manager pieces +contained within the Endpoint Policy Manager Cloud Client. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/mac/how_to_install_the_endpointpolicymanager_1.webp) + +Then use the details provided earlier to install the certificate and register with the Endpoint +Policy Manager Cloud service. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/mac/how_to_install_the_endpointpolicymanager_2.webp) + +## Endpoint Policy Manager Commands after Installation + +Endpoint Policy Manager on Mac has a variety of commands you can perform.  Start with +`policypak –help` to see all the commands which might be different than what is presented here. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/mac/how_to_install_the_endpointpolicymanager_3.webp) + +A few important commands to try out would be: + +`Policypak cloud-sync` which shows the list of policies affecting this Mac. Tip: This command may be +run by any user (without Sudo / admin rights.) + +![A black screen with white text Description automatically generated](/images/endpointpolicymanager/mac/how_to_install_the_endpointpolicymanager_4.webp) + +`Policypak license-list –verbose` to get the license list from Cloud service. + +![A computer screen with white text Description automatically generated](/images/endpointpolicymanager/mac/how_to_install_the_endpointpolicymanager_5.webp) + +And `policypak policy-list` to get a total list of what is happening on the machine. + +![Inserting image...](/images/endpointpolicymanager/mac/how_to_install_the_endpointpolicymanager_6.webp) + +Mac policies are then created in the in-cloud editors against the All | MacOS groups or any Company +Groups’ macOS group like what’s seen here. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/mac/how_to_install_the_endpointpolicymanager_7.webp) diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/mac/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/mac/_category_.json new file mode 100644 index 0000000000..883c8954b2 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/mac/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Troubleshooting + Logging the Mac OS Client", + "position": 40, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/mac/cloudlog.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/mac/cloudlog.md similarity index 100% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/mac/cloudlog.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/mac/cloudlog.md diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/mac/eventcollectiion.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/mac/eventcollectiion.md similarity index 97% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/mac/eventcollectiion.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/mac/eventcollectiion.md index 597d06325f..a501c06a44 100644 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/mac/eventcollectiion.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/mac/eventcollectiion.md @@ -77,7 +77,7 @@ Notes on Collection Configuration: :::note See the -[How can I keep the same or specify different parameters for Event Collection for child groups? How does a computer behave if a member of multiple groups?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/eventcollection/childgroups.md) +[How can I keep the same or specify different parameters for Event Collection for child groups? How does a computer behave if a member of multiple groups?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/eventcollection/childgroups.md) topic for more information. ::: diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/mac/logs.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/mac/logs.md similarity index 100% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/mac/logs.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/mac/logs.md diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/mac/overview.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/mac/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/mac/overview.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/mac/overview.md diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/mac/reports.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/mac/reports.md similarity index 100% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/mac/reports.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/mac/reports.md diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/overview.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/overview.md new file mode 100644 index 0000000000..9a6e990307 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/overview.md @@ -0,0 +1,30 @@ +--- +title: "Endpoint Privilege Manager (MacOS using EPM Cloud)" +description: "Endpoint Privilege Manager (MacOS using EPM Cloud)" +sidebar_position: 30 +--- + +# Endpoint Privilege Manager (MacOS using EPM Cloud) + +Getting Started & Installation + +Endpoint Policy Manager Cloud for MacOS may be used when the Mac is connected to Endpoint Policy +Manager Cloud service. + +The Endpoint Policy Manager Cloud for MacOS supports the following functions: + +- Connect to Endpoint Policy Manager Cloud, claim a Endpoint Policy Manager Cloud license and + download new Mac-specific policies +- Remove Local admin rights and overcome admin prompts +- Block / Allow USB and DMG files + +In this section you will learn the supported versions, how to install the client, command line +options, and tips for mass installation. + +## Supported Versions of the MacOS Client + +Supported versions of the MacOS client are: + +Mac OS 13 Ventura + +Mac OS 14 Sonoma diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/scenarios/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/scenarios/_category_.json new file mode 100644 index 0000000000..41609cfee8 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/scenarios/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Supported Scenarios and Policy Types", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/scenarios/conditions.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/scenarios/conditions.md new file mode 100644 index 0000000000..a357976086 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/scenarios/conditions.md @@ -0,0 +1,55 @@ +--- +title: "Conditions" +description: "Conditions" +sidebar_position: 30 +--- + +# Conditions + +To make a match you need to match one or more Conditions: Path, Hash or Signature. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/mac/scenarios/conditions_1.webp) + +- Path – The name of the file and/or the location. This is the least secure method so use it with + caution. You may also provide a folder or folder recursively. +- Hash — This is bound to change from time to time, so use sparingly. +- Signature — Digitally signed items about the package which are difficult to forge. + +You can see the dialogs for Path, Hash and Signature condition here: + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/mac/scenarios/conditions_2.webp) + +To acquire the Path, you may use the Finder. + +![conditions_3](/images/endpointpolicymanager/mac/scenarios/conditions_3.webp) + +To acquirethe application's Hash or Signature, you can use the `ppfileinfo` tool: + +![A computer screen with white text Description automatically generated](/images/endpointpolicymanager/mac/scenarios/conditions_4.webp) + +Actions: + +- Deny Execution — Deny installation of PKG files; +- Allow Execution —  Operates in accordance with the system configurations (Endpoint Policy Manager + client logs actions); +- Elevate — Gives the user elevated privileges for actions, e.g. can perform actions without admin + rights. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/mac/scenarios/conditions_5.webp) + +Additional Approve settings may be: + +- Not configured — Allow all users to perform the elevation / install if a rule match occurs. +- Credentials — Specify who can perform the elevation / install if a rule match occurrs + + - Any Administrator — Permit anyone will Admin credentials to perform the installation + - User — Specify specific users (non-Admin) which, with their own password, will perform the + elevation / installation. + +:::note +Users may be specified with wildcards, such as teacher\*, to allow all Teachers (Teacher1, +Teacher2, etc.) to perform the work. +::: + + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/mac/scenarios/conditions_6.webp) diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/scenarios/launchcontrol.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/scenarios/launchcontrol.md new file mode 100644 index 0000000000..fc313e14d9 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/scenarios/launchcontrol.md @@ -0,0 +1,47 @@ +--- +title: "Application Launch Approval (aka Launch Control)" +description: "Application Launch Approval (aka Launch Control)" +sidebar_position: 50 +--- + +# Application Launch Approval (aka Launch Control) + +:::note +See the [Application Launch Approval](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/applicationlaunch.md) +video for an overview of this section. +::: + + +You might have an application which is part of your deployment, but you want to prevent it from +running. In this example Firefox is on the machine and runs as expected as a standard user. + +![Inserting image...](/images/endpointpolicymanager/mac/scenarios/application_launch_approval.webp) + +To block Firefox from running you can specify a condition. You may use the PPFILEINFO tool to get +the SigningID (or other attributes) for a match. + +![application_launch_approval_1](/images/endpointpolicymanager/mac/scenarios/application_launch_approval_1.webp) + +In this example we are using a Signing Identifier: `org.mozilla.firefox`. + +Then use that as your condition: + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/mac/scenarios/application_launch_approval_2.webp) + +The result of the policy is that the application will be blocked on launch. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/mac/scenarios/application_launch_approval_3.webp) + +Other actions besides Deny Execution are Allow Execution, with some options: + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/mac/scenarios/application_launch_approval_4.webp) + +- No Confirmation — Application launches +- Confirmation — Provides a pop-up asking user to confirm the actual launch +- Reason — User is asked to provide reason why this should be launched +- Challenge — Please see section “Using MacOS + Admin Approval” later in this document +- Credentials — User is forced to provide credentials to launch application + +Examples of the dialog boxes may be seen here: + +![Screens screenshot of a computer Description automatically generated](/images/endpointpolicymanager/mac/scenarios/application_launch_approval_5.webp) diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/scenarios/macfinder.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/scenarios/macfinder.md similarity index 95% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/scenarios/macfinder.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/scenarios/macfinder.md index 846cb38d77..549707e976 100644 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/scenarios/macfinder.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/scenarios/macfinder.md @@ -8,7 +8,7 @@ sidebar_position: 70 :::note See -[Endpoint Policy Manager MacOS: Mac Finder Policies](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/finder.md) video +[Endpoint Policy Manager MacOS: Mac Finder Policies](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/finder.md) video for an overview of this section. ::: @@ -72,5 +72,5 @@ The three action types on a rule are: - Elevate — Perform the overcome action required to perform the task See the -[Endpoint Policy Manager MacOS: Mac Finder Policies](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/finder.md) video +[Endpoint Policy Manager MacOS: Mac Finder Policies](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/finder.md) video for examples of Action types with Finder policies diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/scenarios/macprivhelper.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/scenarios/macprivhelper.md similarity index 95% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/scenarios/macprivhelper.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/scenarios/macprivhelper.md index 95fad1a2d1..60204b606f 100644 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/scenarios/macprivhelper.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/scenarios/macprivhelper.md @@ -8,7 +8,7 @@ sidebar_position: 80 :::note See -[Endpoint Policy Manager LPM for MacOS: Privilege Policies (for Helper Apps)](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/privilege.md) +[Endpoint Policy Manager LPM for MacOS: Privilege Policies (for Helper Apps)](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/privilege.md) for a video overview of this section. ::: @@ -70,6 +70,6 @@ The three action types on a rule are: - Reason — User must put in rationale code then before the task is performed. - Challenge — User must requests an Admin Approval code for the task to be accepted and performed. See - [Endpoint Policy Manager for Mac and Admin Approval](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/adminapproval.md) + [Endpoint Policy Manager for Mac and Admin Approval](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/adminapproval.md) for additional information on this topic. - Credentials — User must re-enter credentials for the task to be performed diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/scenarios/mountunmount.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/scenarios/mountunmount.md new file mode 100644 index 0000000000..22f5231ef3 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/scenarios/mountunmount.md @@ -0,0 +1,54 @@ +--- +title: "Mount / Unmount for USB and .DMG Files" +description: "Mount / Unmount for USB and .DMG Files" +sidebar_position: 60 +--- + +# Mount / Unmount for USB and .DMG Files + +:::note +See the +[Endpoint Privilege Manager for Mac: Mount / Unmount Part I](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/mountunmountpart1.md) +video and the +[Endpoint Privilege Manager for Mac: Mount / Unmount Part II](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/mountunmounpart2.md) +video for an overview of this section. +::: + + +You might want to manage when USB devices and/or .DMG disk files can be mounted (or unmounted). + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/mac/scenarios/mount_unmount_for_usb_and.webp) + +You can perform the following functions: + +Operations: + +- Mount — Operations for mounting USB devices and dmg files +- Unmount — Operations for unmounting/ejecting USB devices and dmg disk images +- Apply to any device — Automatically apply to all USB disk devices and DMG files + +Device Types: + +- USB — USB disk devices are supported +- DMG — DMG files are supported as mounted devices + +Action: + +- Deny Execution — Block the specified device type +- Allow Execution —Allow attachment of specified device type +- Elevate — Lets users perform operations with elevated privileges without entering an admin + password + +Targets: + +- Path — Path to DMG file to mount it +- Sources — Mount point defined by the system by USB device name or DMG file name + +For a simple demo, let's Block All USB and DMG devices. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/mac/scenarios/mount_unmount_for_usb_and_1.webp) + +The result of trying to attach a new device by USB can be seen here, as Endpoint Policy Manager has +blocked it. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/mac/scenarios/mount_unmount_for_usb_and_2.webp) diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/scenarios/overview.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/scenarios/overview.md new file mode 100644 index 0000000000..8321bc828c --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/scenarios/overview.md @@ -0,0 +1,19 @@ +--- +title: "Supported Scenarios and Policy Types" +description: "Supported Scenarios and Policy Types" +sidebar_position: 20 +--- + +# Supported Scenarios and Policy Types + +Endpoint Policy Manager for Mac supports a variety of scenarios: + +- Package Installer Policy — Manage (install / block) packages +- System Settings Policy — Manage System Settings rights +- SUDO Policy — Perform command line functions +- Application Launch Approval Policy — Allow / Deny / Challenge application launch +- Mount/Unmount Policy — Allow/ Block USB devices and DMG files +- Finder Policy — Elevate application installs and uninstalls +- Privilege Elevation — Elevate applications which have helper applications + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/mac/scenarios/supported_scenarios_and_policy.webp) diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/scenarios/packageinstallation.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/scenarios/packageinstallation.md new file mode 100644 index 0000000000..2ef487c38e --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/scenarios/packageinstallation.md @@ -0,0 +1,19 @@ +--- +title: "Package Installation Policy" +description: "Package Installation Policy" +sidebar_position: 20 +--- + +# Package Installation Policy + +:::note +See the +[Endpoint Policy Manager Least Priv Manager for Macs Application Package Support](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/applicationpackage.md) +video for an overview of this section. +::: + + +When a standard user attempts to install a .PKG file they are not allowed to do so. In this example, +Skype for Business prompts the user for admin credentials before installing. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/mac/scenarios/package_installation_policy.webp) diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/scenarios/sudo.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/scenarios/sudo.md new file mode 100644 index 0000000000..1e73f2e126 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/scenarios/sudo.md @@ -0,0 +1,44 @@ +--- +title: "SUDO" +description: "SUDO" +sidebar_position: 40 +--- + +# SUDO + +:::note +See the +[Endpoint Policy Manager Cloud and SUDO support](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/sudosupport.md) +video and the +[Endpoint Policy Manager Cloud Mac + SUDO Using Wildcard Example](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/wildcards.md) +video for an overview of this section. +::: + + +The point of SUDO policies is to enable a standard user to perform SUDO commands without needing to +provide actual admin credentials. In this example the user wants to perform the command + +``` +Sudo mkdir /Users/Sudo/test1 but is blocked with a password request. +``` + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/mac/scenarios/sudo.webp) + +To overcome this, create a SUDO rule like this one: + +:![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/mac/scenarios/sudo_1.webp) + +The Actions are: + +- Deny Execution — Blocks the running of matching SUDO commands +- Allow Execution — Running SUDO commands is limited according to the system configuration. The + PolicyPak MacOS client logs the user's actions +- Elevate — SUDO commands run without administrator password request, applicable for admin and + standard users. + +For this example policy, choose **Elevate**. + +After the policy is synced, the result on the client can be seen here, where the same command now +runs without password requirement. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/mac/scenarios/sudo_2.webp) diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/scenarios/systemsettings.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/scenarios/systemsettings.md similarity index 77% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/scenarios/systemsettings.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/scenarios/systemsettings.md index 7fd4fcd24b..1ee00a8716 100644 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/scenarios/systemsettings.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/macos/scenarios/systemsettings.md @@ -8,7 +8,7 @@ sidebar_position: 10 :::note See the -[Endpoint Policy Manager for Mac / Least Priv Manager: System Settings policy](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/systemsettings.md) +[Endpoint Policy Manager for Mac / Least Priv Manager: System Settings policy](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/systemsettings.md) video for an overview of this section. ::: @@ -16,10 +16,7 @@ video for an overview of this section. Standard Users are prompted when they access System Settings in MacOS. For instance, trying to modify Date&Time or Wi-Fi settings prompts standard users for admin credentials. -![Screens screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/mac/scenarios/system_settings_policy.webp) +![Screens screenshot of a computer Description automatically generated](/images/endpointpolicymanager/mac/scenarios/system_settings_policy.webp) System Settings Policy enables you to: @@ -31,10 +28,7 @@ System Settings Policy enables you to: In this example, we are permitting a Standard User to overcome restricted access to Date&Time and Wi-Fi System Settings. -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/mac/scenarios/system_settings_policy_1.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/mac/scenarios/system_settings_policy_1.webp) Without Endpoint Policy Manager policy, the system asks for administrator confirmation to change system settings for the standard user. With Endpoint Policy Manager you are able to provide the diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/_category_.json new file mode 100644 index 0000000000..edc0dbde3f --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Endpoint Privilege Manager (Windows)", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/adminapproval/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/adminapproval/_category_.json new file mode 100644 index 0000000000..7323accf42 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/adminapproval/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Admin Approval", + "position": 40, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/adminapproval/additionaldetails.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/adminapproval/additionaldetails.md similarity index 100% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/adminapproval/additionaldetails.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/adminapproval/additionaldetails.md diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/adminapproval/avoidpopups.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/adminapproval/avoidpopups.md similarity index 82% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/adminapproval/avoidpopups.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/adminapproval/avoidpopups.md index 2230f0ae45..49b3c2be7d 100644 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/adminapproval/avoidpopups.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/adminapproval/avoidpopups.md @@ -11,7 +11,7 @@ click on anything. :::note See the -[Understand "Enforce Admin Approval for all installers" behavior](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/enforce.md) +[Understand "Enforce Admin Approval for all installers" behavior](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/enforce.md) video to learn how to avoid pop-ups with Admin Approval. ::: @@ -24,10 +24,7 @@ This will generally happen when two things are true: When an application is detected as an installer, even if a user doesn’t click on it, pop-ups may still come up.. Two examples of pop-ups that users might see, OneDrive and Java, are shown here. -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/adminapproval/avoid_pop_ups_with_admin_approval.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/adminapproval/avoid_pop_ups_with_admin_approval.webp) There are two ways to overcome these messages: @@ -51,10 +48,7 @@ The first way to see which applications are causing unwanted pop-ups is via Endp operational logs, as seen here. To find this log, go to `Users\\AppData\Local\PolicyPak` Least Privilege Manager, and open ppUser_operational.log. -![A screenshot of a computer program - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/adminapproval/avoid_pop_ups_with_admin_approval_1.webp) +![A screenshot of a computer program Description automatically generated](/images/endpointpolicymanager/leastprivilege/adminapproval/avoid_pop_ups_with_admin_approval_1.webp) :::note Some applications may have different ways to self-update, possibly calling more than one @@ -69,10 +63,7 @@ You can get similar information from the Endpoint Policy Manager event logs, whi **Application and Services Logs** > **Endpoint Policy Manager**. An event will appear showing canceled dialogs, like the one shown here. -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/adminapproval/avoid_pop_ups_with_admin_approval.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/adminapproval/avoid_pop_ups_with_admin_approval.webp) There is more information on using Event Viewer with Endpoint Policy Manager at the end of this guide, with specific event IDs to search for. diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/adminapproval/gettingstarted/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/adminapproval/gettingstarted/_category_.json new file mode 100644 index 0000000000..a703798fcc --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/adminapproval/gettingstarted/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Getting Started with Admin Approval", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "gettingstarted" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/adminapproval/gettingstarted/gettingstarted.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/adminapproval/gettingstarted/gettingstarted.md new file mode 100644 index 0000000000..de75793c88 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/adminapproval/gettingstarted/gettingstarted.md @@ -0,0 +1,70 @@ +--- +title: "Getting Started with Admin Approval" +description: "Getting Started with Admin Approval" +sidebar_position: 10 +--- + +# Getting Started with Admin Approval + +If there’s no Endpoint Policy ManagerLeast Privilege Manager rule to automatically elevate an +application (or allow it to bypass SecureRun™), the user is prompted with a special dialog to +request access. + +:::note +See the [Admin Approval demo](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/demo.md) video for +Endpoint Policy Manager (formerly PolicyPak) Least Privilege Manager Admin Approval mode setup and +in action. +::: + + +Endpoint Policy Manager (formerly PolicyPak) Least Privilege Managerr’s Admin Approval works as if +the person with the Admin Approval Tool has a shared secret, which is a secret key that is deployed +to the computer. + +There are three parts to Admin Approval: + +- The Endpoint Policy Manager (formerly PolicyPak) Least Privilege Manager policies, which establish + Admin Approval and its secret key +- Securing the secret key (if using Group Policy method) +- The Endpoint Policy Manager (formerly PolicyPak) Least Privilege Manager Admin Approval Tool + +:::note +The secret key must be delivered to the computer. You cannot deploy the key to the user. +You could have one secret key for all computers and all admins, or you could have a secret key for +only some computers and some admins. +::: + + +Admin Approval will show the user the Endpoint Policy Manager Admin Approval prompt instead of the +Windows UAC prompt when any of the following conditions are true: + +- The app is marked as requiring elevation by its developer (in the app manifest). You can see these + applications easily because they typically show a Windows shield graphic in the application’s + icon. +- The app is a legacy installer. This is defined by both Windows and Endpoint Policy Manager as a + 32-bit app without an app manifest and with one of special "setup" keywords (such as install, + setup, and so on) in its file info. +- The app is any installer and Endpoint Policy Manager ’s Admin Approval **Enforce Admin Approval + for all installers** option is enabled (explained later). +- Endpoint Policy Manager SecureRun™ is enabled, and the executable is run by someone not on the + SecureRun™ list. +- The user right-clicks a file and selects **Run with Endpoint Policy Manager**. + +For complete clarity, there are times when the user will still see a standard Windows UAC prompt and +not a PolicyPak Admin Approval prompt. These instances include: + +- When a COM interface used by the app requires elevation (for instance, the network settings + dialog). +- When one process creates another process and forces Windows to show the UAC prompt, as in one of + the following instances: + + - When a user is running Acrobat Reader as a Standard User and tries to change the upgrade + behavior. In this case, a standard Windows UAC prompt will show. + - If a user attempts to run an application like Procmon; this is because it’s attempting to load + a device driver, the standard Windows UAC prompt will show. + +- When an installer shows the standard UAC prompt. For instance, the Chrome installer doesn't + require admin rights (as it can install Chrome per user into %localappdata%). Regardless, the + Chrome installer shows a UAC prompt to see if a user can or wants to install Chrome for all users. + To help work around this issue, we provide the **Enforce Admin Approval for all installers** + option, which is explained later. diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/adminapproval/gettingstarted/secretkey.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/adminapproval/gettingstarted/secretkey.md similarity index 81% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/adminapproval/gettingstarted/secretkey.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/adminapproval/gettingstarted/secretkey.md index dd1e32844c..f6eb4448b3 100644 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/adminapproval/gettingstarted/secretkey.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/adminapproval/gettingstarted/secretkey.md @@ -9,18 +9,12 @@ sidebar_position: 10 On the Computer side of the GPO, use the Endpoint Policy Manager (formerly PolicyPak) Least Privilege Manager node to create a new Admin Approval Policy. -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/adminapproval/creating_the_secret_key.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/adminapproval/creating_the_secret_key.webp) You’ll now see the Admin Approval Settings, as shown in here. Change the Admin Approval State from **Not Configured** to **Enabled**. -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/adminapproval/creating_the_secret_key_1.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/adminapproval/creating_the_secret_key_1.webp) You also can change two other settings: @@ -34,17 +28,11 @@ Next, click on the **Secret Key** tab. Here is where you can create a secret key **Derive from Password** or **Generate Random**. Then, click **Copy**, and paste the secret key into Notepad. -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/adminapproval/creating_the_secret_key_2.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/adminapproval/creating_the_secret_key_2.webp) Click on the **Misc** tab, which enables you to configure the two policies shown here. -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/adminapproval/creating_the_secret_key_3.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/adminapproval/creating_the_secret_key_3.webp) - Custom Message - Configure the pop-up the user will see when Admin Approval kicks in. - Display name - Configure the right-click menu item the user will which will invoke Admin Approval. diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/adminapproval/gettingstarted/secretkeysecure.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/adminapproval/gettingstarted/secretkeysecure.md similarity index 75% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/adminapproval/gettingstarted/secretkeysecure.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/adminapproval/gettingstarted/secretkeysecure.md index fbf0ce6c7a..83def6a7d8 100644 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/adminapproval/gettingstarted/secretkeysecure.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/adminapproval/gettingstarted/secretkeysecure.md @@ -8,10 +8,7 @@ sidebar_position: 20 The secret key of Admin Approval is stored within the XML inside the GPO, as seen here. -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/adminapproval/securing_the_secret_key_when.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/adminapproval/securing_the_secret_key_when.webp) If you look closely, you will see it is not the same key that was used earlier. Indeed, it is re-hashed or re-encrypted before it is placed within the XML within the GPO. Even so, it is best @@ -40,18 +37,12 @@ The **Scope** tab of the GPO, shown here, displays an example of a GPO where onl would be able to determine the contents of the GPO (and therefore download the key as a Computer, but never expose it to a User). -![A screenshot of a computer screen - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/adminapproval/securing_the_secret_key_when_1.webp) +![A screenshot of a computer screen Description automatically generated](/images/endpointpolicymanager/leastprivilege/adminapproval/securing_the_secret_key_when_1.webp) This immediately prevents Standard Users from reading the Computer side of the GPO, as shown in here. -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/adminapproval/securing_the_secret_key_when.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/adminapproval/securing_the_secret_key_when.webp) Again, if you choose to place computers into an Active Directory security group, you will need to reboot the computer so it will pick up the new computer group membership and then the GPO. @@ -60,7 +51,4 @@ You can verify the computer got the GPO key by opening an Admin command prompt, `GPresult /R`, and verifying that the GPO was applied and that the computer is in the group, as shown here. -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/adminapproval/securing_the_secret_key_when_2.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/adminapproval/securing_the_secret_key_when_2.webp) diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/adminapproval/overview.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/adminapproval/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/adminapproval/overview.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/adminapproval/overview.md diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/adminapproval/test.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/adminapproval/test.md similarity index 76% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/adminapproval/test.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/adminapproval/test.md index cffad834c5..8ebd4ab5b6 100644 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/adminapproval/test.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/adminapproval/test.md @@ -11,10 +11,7 @@ PowerPointViewer installer, provided there is not a rule in place that will elev application. The user is presented with a **Request Code** (also called a Challenge Code) as shown here. -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/adminapproval/testing_admin_approval.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/adminapproval/testing_admin_approval.webp) The user needs to present this **Request Code**, typically over the phone, to an Admin who can create a **Response Code**. @@ -35,10 +32,7 @@ Here, you can see the Endpoint Policy Manager Least Privilege Manager Admin Appr from the Endpoint Policy Manager Extras folder. Running it for the first time on any Admin’s machine requires you to enter in the same secret key from the GPO you used earlier. -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/adminapproval/testing_admin_approval_1.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/adminapproval/testing_admin_approval_1.webp) You can save the secret key in the Registry of this Admin’s machine, secured with his own encrypted password. You could also require that the key cannot be viewed ever again when this tool is run by @@ -63,10 +57,7 @@ in the **Request Code**, then pick the option that makes sense. The items you ca as Admin. - Expires - Choose if this code will expire in 10 minutes, 1 hour, 12 hours, or never. -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/adminapproval/testing_admin_approval_2.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/adminapproval/testing_admin_approval_2.webp) :::note The Admin Approval Tool may be branded. See the section **Branding and Customization** in @@ -77,10 +68,7 @@ this guide. After filling in these options, assign a value to the **Response Code** and the application will launch. -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/adminapproval/testing_admin_approval_3.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/adminapproval/testing_admin_approval_3.webp) In our example, we specified that the code could be used one time, so if the user tries to rerun the same application, they are prompted again. @@ -88,15 +76,9 @@ same application, they are prompted again. Remember that an admin can run the Admin Approval Tool if the Endpoint Policy Manager MMC snap-in is installed. -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/adminapproval/testing_admin_approval.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/adminapproval/testing_admin_approval.webp) You can also see and launch the Admin Approval Tool from within a GPO, provided you have the secret key inside the GPO, as seen here. -![A computer screen shot of a computer screen - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/adminapproval/testing_admin_approval_4.webp) +![A computer screen shot of a computer screen Description automatically generated](/images/endpointpolicymanager/leastprivilege/adminapproval/testing_admin_approval_4.webp) diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/adminapproval/useemail.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/adminapproval/useemail.md new file mode 100644 index 0000000000..17c667bdb3 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/adminapproval/useemail.md @@ -0,0 +1,51 @@ +--- +title: "Using Email for Admin Approval" +description: "Using Email for Admin Approval" +sidebar_position: 30 +--- + +# Using Email for Admin Approval + +If needed, you can use email to authorize items using Endpoint Policy Manager (formerly PolicyPak) +Least Privilege Manager. This way, users can click a link that automatically emails the Helpdesk or +ServiceNow or support personnel, rather than initiating a phone call. Using the same Admin Approval +policy we created earlier, open the policy up and click on the **Email** tab. Change the **Use of +email** field to **Enabled** and insert an email address that will handle the admin approvals. + +:::note +See the [Using Email / Long Codes](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/longcodes.md) video for +using email for Admin Approval. +::: + + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/adminapproval/using_email_for_admin_approval.webp) + +The two options are: + +- Always use email (only) - Will not show a shortcode in the Admin Approval Dialog. +- Open the message in Notepad instead - Instead of opening an email, it will open in Notepad. This + is useful if you don’t have any locally installed email client and wish to copy / paste the + details into Gmail, Office 365 Web mail, or similar. See the + [Endpoint Privilege Manager: Admin Approval Email method (with Notepad instead)](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/email.md) + video for a demonstration. + +Now when users click on an install or run an application, they receive a slightly different prompt. + +Below you can see the long response code now required, instead of the short response code. Users +will click the **Send a request mail to my support** link, which will automatically send the +approval request using their email application. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/adminapproval/using_email_for_admin_approval_1.webp) + +Here you can see the generated email containing the request code. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/adminapproval/using_email_for_admin_approval_2.webp) + +When the email is received, a support admin can copy the request code and paste it into the Admin +Approval Tool. Once pasted into the tool, all of the task information about the application appears +just as it was when using the short request code process. + +You can then check the item using VirusTotal (optional) and get the response code copied to clip +board and/or send an email back to the user. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/adminapproval/using_email_for_admin_approval_3.webp) diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/apply/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/apply/_category_.json new file mode 100644 index 0000000000..6b1c959747 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/apply/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Apply on Demand Rules and Self-Elevation Rules", + "position": 30, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/apply/ondemand.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/apply/ondemand.md new file mode 100644 index 0000000000..d9af708947 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/apply/ondemand.md @@ -0,0 +1,52 @@ +--- +title: "Apply on Demand Rules" +description: "Apply on Demand Rules" +sidebar_position: 10 +--- + +# Apply on Demand Rules + +:::note +See the +[Least Privilege Manager: Apply On Demand](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/applyondemand.md) video for +information on Endpoint Policy Manager Least Privilege Manager Apply on Demand. +::: + + +The Apply on Demand feature enables advanced users to know when they should self-elevate their own +situations and programs. Up until now, each rule was automatically applied when a user tried to run +an application. + +When Apply on Demand is selected within a policy (see screenshot below), this policy no longer +applies automatically. This is useful in a lot of cases with developer applications where they can +run non-elevated and work nearly all the time, but perhaps only occasionally need elevation some of +the time. + +For this example, re-open and edit the policy that performs automatic elevation for Process Monitor, +and set the action to **Apply on Demand**. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/rules/apply/apply_on_demand_rules.webp) + +The result of this change (after running GPupdate) is that when the end-user tries to run Procmon, +they will see the standard UAC prompt. + +Now that you have selected Apply on Demand, when the rule applies, the application will no longer +automatically honor the rule you have set up. Double-clicking the application will now yield a UAC +prompt (if the application requires UAC), like the one shown here. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/rules/apply/apply_on_demand_rules.webp) + +The user will now need to right-click the application and choose **Run with Endpoint Policy Manager +On-Demand**. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/rules/apply/apply_on_demand_rules_1.webp) + +:::note +You can change the name of the menu item from **Run with** Endpoint Policy Manager +**On-Demand** via Global Settings Policy.. See the +[Best Practices and Miscellaneous Topics](/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/overviewmisc.md) topic for additional +information on Global Settings Policy. +::: + + +When the user does this, the application launches, bypassing the UAC prompt. diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/apply/overview.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/apply/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/apply/overview.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/apply/overview.md diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/apply/selfelevation.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/apply/selfelevation.md new file mode 100644 index 0000000000..5a8e24c956 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/apply/selfelevation.md @@ -0,0 +1,85 @@ +--- +title: "Self-Elevation Rules" +description: "Self-Elevation Rules" +sidebar_position: 20 +--- + +# Self-Elevation Rules + +:::note +See the +[Endpoint Policy Manager Least Priv Manager: Self Elevate Mode](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/selfelevatemode.md) +video for information on Endpoint Policy Manager Least Privilege Manager self-elevation rules. +::: + + +There is a self-elevation mode for special situations as well. Although this mode is normally not +recommended, as it makes your systems more vulnerable, there may be a special circumstance in which +you want to grant a designated user local admin-like rights, without making them an admin. + +You may have particular users which need to run EXE or MSI applications at will, but to whom you +don't want to give local admin rights. For instance: + +- Your IT personnel need the ability to install MSIs elevated and to access privileged applications + such as Process Monitor. +- Your developers constantly create and test new scripts so they need to run them elevated when + needed. +- Your HR personnel need the ability to run Java elevated in order to run the applications they + depend on. + +Self-Elevation mode can be used for these types of special circumstances. By creating targeted +policies, you can ensure that designated users receive elevation rights for what they need, when +they need them. Let's look at how self-elevation works. + +Start by creating a new self-elevation policy as seen here. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/rules/apply/self_elevation_rules.webp) + +You can then select which types of executables you will allow for self-elevation. Here, we have +chosen EXE and MSI applications. + +![A screenshot of a computer screen Description automatically generated](/images/endpointpolicymanager/leastprivilege/rules/apply/self_elevation_rules_1.webp) + +You must specify at least one group or user for the policy, even if the policy is targeted at the +organizational unit (OU) level. Unless you choose someone to direct the policy to, the policy will +not apply to anyone. In this example, the EastSalesUsers has been chosen. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/rules/apply/self_elevation_rules_2.webp) + +In order for a user to self-elevate an application, they have to right-click the application and +choose the self-elevation command from the context menu. You can choose to create a custom name for +this command if you wish or you can choose to use the default. You may also customize a message to +remind users that all self-elevated actions are audited, as is seen here. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/rules/apply/self_elevation_rules_3.webp) + +The final screen requires you to name the policy. You can also require justification text and/or +re-authentication to Windows (which works with Windows Hello, etc.) + +Users must then input an explanation as to why they want to run the given application and/or +re-authenticate before the application is launched. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/rules/apply/self_elevation_rules_4.webp) + +So in this scenario, let us say that EastSalesUser1 operating as a standard user wants to run +Procmon, which requires local admin rights. While they cannot run the application normally, they can +right-click on the application and select **Run Self Elevated with Endpoint Policy Manager**. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/rules/apply/self_elevation_rules_5.webp) + +Here you can see the Endpoint Policy Manager Self Elevation prompt that the user will see. The +customized message created earlier appears here. Because justification text was required, the user +must type a reason for why they wish to access this application. Once the user clicks **OK** the +application will open. + +![A screenshot of a computer error Description automatically generated](/images/endpointpolicymanager/leastprivilege/rules/apply/self_elevation_rules_6.webp) + +If Force Reauthentication is selected, the behavior is like what is seen here. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/rules/apply/self_elevation_rules_7.webp) + +Self-elevated application requests are audited in Windows Event Viewer. There are two Event IDs +associated with Endpoint Policy Manager Self Elevation. Note that the username and application are +included in the log information. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/rules/apply/self_elevation_rules_8.webp) diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/automatic.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/automatic.md new file mode 100644 index 0000000000..dc06cb09de --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/automatic.md @@ -0,0 +1,92 @@ +--- +title: "Automatic Rules Generator Tool" +description: "Automatic Rules Generator Tool" +sidebar_position: 100 +--- + +# Automatic Rules Generator Tool + +Once you remove Admin rights, the user will not be able to run some applications. Additionally, once +Endpoint Policy Manager SecureRun™ is enabled, the user will not be able to install and run items +they download. However, we have a utility in the PolicyPak Extras folder called PolicyPak LPM Auto +Rule Generator Tool, which will help you create rules to elevate applications and bypass SecureRun™ +as necessary. This tool operates on one machine at a time, and it is typically used on one or a few +representative machines. + +:::note +See the +[Auto Rules Generator Tool (with SecureRun)](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/autorulesgeneratortool.md) +video for a demo of Endpoint Policy Manager Automatic Rules Generator Tool in action. +::: + + +Following are the basic steps for operating the tool: + +- Point the tool toward one machine (in the future this tool might work for multiple machines). +- Define locations to search. +- Determine whether to turn on the SecureRun™ Simulator. +- Create rules to allow, block, or elevate, as needed. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/tool/rulesgenerator/endpointpolicymanager_automatic_rules.webp) + +On the opening page, pick a location or locations to run the tool. The tool offers standard or +custom locations (**Other Locations**) such as the User’s Desktop, and other unusual locations, as +shown here. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/tool/rulesgenerator/endpointpolicymanager_automatic_rules_1.webp) + +Next, select which types of items to search for. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/tool/rulesgenerator/endpointpolicymanager_automatic_rules_2.webp) + +Next, you have the option to turn on the SecureRun™ Simulator. The SecureRun™ Simulator will +simulate what would happen if SecureRun™ was turned on, so you can know which applications would be +automatically blocked or allowed based on the members of the SecureRun™ list. You can also add a +member like Microsoft Endpoint Manager (SCCM and Intune) or other installer accounts, as you would +with SecureRun™. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/tool/rulesgenerator/endpointpolicymanager_automatic_rules_3.webp) + +Then, you’ll be presented with all the applications and their default state and will have the +opportunity to create rules that will automatically change the state. For instance, when SecureRun™ +is enabled, many applications are set to Automatic Block. " + +You can select the drop-down in the Action column next to any program and change the state. + +- To allow NotepadP.exe to run even though SecureRun™ is on, simply change its state to "Allow" + (which was previously Automatic Block). +- To allow Procmon.exe to run elevated, even though SecureRun™ would block it and Procmon would + require admin rights, change the state to Elevate. +- You can also specify Block, but if you select this you will be double blocking, because not only + will SecureRun™ be blocking the program (automatically), but you will have also added a Block + (Deny) rule. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/tool/rulesgenerator/endpointpolicymanager_automatic_rules_4.webp) + +To save a little time, you can also hide items that are automatically allowed or blocked by +SecureRun™, as seen here, to reduce the number of items shown. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/tool/rulesgenerator/endpointpolicymanager_automatic_rules_5.webp) + +Next, you are presented with a summary of the rules you will be creating. + +![A screenshot of a computer program Description automatically generated](/images/endpointpolicymanager/leastprivilege/tool/rulesgenerator/endpointpolicymanager_automatic_rules_6.webp) + +Now you can create the conditions automatically. The most secure settings are automatically checked, +but you may change them to other settings if desired. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/tool/rulesgenerator/endpointpolicymanager_automatic_rules_7.webp) + +The final page, shown in here, enables you to export the rules directly into a GPO (provided you +have Group Policy Create/Edit rights) or into an XML file that you can import into a Group Policy +Object. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/tool/rulesgenerator/endpointpolicymanager_automatic_rules_8.webp) + +Rules are now exported. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/tool/rulesgenerator/endpointpolicymanager_automatic_rules_9.webp) + +The result after looking at the GPO is shown here, with your rules ready to go. + +![policypak_automatic_rules_10](/images/endpointpolicymanager/leastprivilege/tool/rulesgenerator/endpointpolicymanager_automatic_rules_10.webp) diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/brandcustomize.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/brandcustomize.md similarity index 75% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/brandcustomize.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/brandcustomize.md index c66596239c..e2318a4d93 100644 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/brandcustomize.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/brandcustomize.md @@ -7,7 +7,7 @@ sidebar_position: 70 # Branding and Customization :::note -See the [Branding the UI and Dialogs](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/branding.md) video for an +See the [Branding the UI and Dialogs](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/branding.md) video for an overview of Branding and Customization. ::: @@ -15,10 +15,7 @@ overview of Branding and Customization. You can customized many of the dialogs presented to users. You start out by creating a Global Settings Policy on the Computer side. -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/branding_and_customization.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/branding_and_customization.webp) The settings contained here are Global, meaning that if there are conflicting settings from multiple policies only the final (last written) set is honored. Here are some example changes to the defaults @@ -38,14 +35,8 @@ The Branding settings you may set are: Hereis an example of changing the Admin Approval Client Branding using Global Settings. -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/branding_and_customization_1.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/branding_and_customization_1.webp) A result of changing the Admin Approval Dialog with the changed settings looks like this. -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/branding_and_customization_2.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/branding_and_customization_2.webp) diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/events/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/events/_category_.json new file mode 100644 index 0000000000..d54c75684b --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/events/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Discovery, Auditing, and Events", + "position": 110, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/events/audit.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/events/audit.md new file mode 100644 index 0000000000..2e7a3284d2 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/events/audit.md @@ -0,0 +1,45 @@ +--- +title: "Creating Policy from Audit Event" +description: "Creating Policy from Audit Event" +sidebar_position: 40 +--- + +# Creating Policy from Audit Event + +Once you have generated events and store them locally or forward them to a service, you can +automatically create rules from events. + +If you are using Endpoint Policy Manager Cloud you can store events from endpoints and then +automatically transition those events to rules. See the +[Endpoint Policy Manager Cloud + PPLPM + Events: Collect Events in the Cloud](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/eventing/cloudevents.md) +video for additional information. + +If you have stored Windows events, you can use the details from those events to make rules using the +MMC snap-in. + +:::note +See the +[Auto-Create Policy from Global Audit event](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/eventing/globalauditevent.md)video +for a demonstration of this. +::: + + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/events/createpolicy/creating_policy_from_audit.webp) + +Then you can follow the wizard and paste in Event log details for supported Endpoint Policy Manager +Event IDs. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/events/createpolicy/creating_policy_from_audit_1.webp) + +In this example, a 6301 (SecureRun) event can be made into a rule with Copy / Paste like this. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/events/createpolicy/creating_policy_from_audit_2.webp) + +After pasting it in, the Wizard recommends some Actions, Conditions and Settings. You’re welcome to +change these as you need to for your situation. + +![A screenshot of a computer screen Description automatically generated](/images/endpointpolicymanager/leastprivilege/events/createpolicy/creating_policy_from_audit_3.webp) + +The result is a policy which performs the action (Elevate or Allow and Log). + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/events/createpolicy/creating_policy_from_audit_4.webp) diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/events/auditingsettings/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/events/auditingsettings/_category_.json new file mode 100644 index 0000000000..ebbe835ccf --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/events/auditingsettings/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Auditing Settings", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/events/auditingsettings/localadmins.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/events/auditingsettings/localadmins.md similarity index 84% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/events/auditingsettings/localadmins.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/events/auditingsettings/localadmins.md index d2b3c7c87d..cb439aaa38 100644 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/events/auditingsettings/localadmins.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/events/auditingsettings/localadmins.md @@ -15,10 +15,7 @@ An example can be seen here with TreeSize Free (Administrator). When you run the administrator, you are prompted with a UAC prompt. When you click **Yes**", the Event 6200 occurs, as shown here. -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/events/auditingsettings/discovery_for_elevated_apps.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/events/auditingsettings/discovery_for_elevated_apps.webp) With the auditing information, you can make a Endpoint Policy Manager (formerly PolicyPak) Least Privilege Manager Elevate rule to overcome this when the user is transitioning from being a local diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/events/auditingsettings/overview.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/events/auditingsettings/overview.md new file mode 100644 index 0000000000..da0180ff9e --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/events/auditingsettings/overview.md @@ -0,0 +1,58 @@ +--- +title: "Auditing Settings" +description: "Auditing Settings" +sidebar_position: 20 +--- + +# Auditing Settings + +Using Endpoint Policy Manager (formerly PolicyPak) Least Privilege Manager to remove admin rights or +turn on SecureRun™ is going to make your machines more secure. However, that also means that some +users might not be able to perform some actions with these two security measures in place. To +mitigate this, you may need to do some research to find out just what privileges your users require. +Endpoint Policy Manager Global Settings Policy lets you set up auditing to find out what +applications require extra privileges from standard users. There are four choices: + +- Audit applications requiring elevation - Help you learn, in advance of a transition, which items + require rules and what items will need rules to overcome UAC prompts. +- Audit elevated applications - Help you learn, after a transition, which items still need rules to + overcome UAC prompts. +- Audit untrusted applications - Help you learn, in advance or after a transition, which items that + would be automatically blocked by SecureRun™ are, in fact, blocked by SecureRun™ and will need + rules to overcome. +- Audit unsigned applications - Help you learn, in advance or after a transition, which items that + would be automatically blocked by SecureRun™ if trapping for unsigned applications. + +To begin the discovery process you will add a New Global Settings Policy, which can be done on +either user or computer side. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/events/auditingsettings/auditing_settings.webp) + +When you create a Global Settings Policy, you can choose to turn on the settings shown here. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/events/auditingsettings/auditing_settings_1.webp) + +Enabling these settings will write special events to the event logs. + +- Audit applications requiring elevation - Makes an audit log entry when a process is not elevated, + but Endpoint Policy Manager (formerly PolicyPak) Least Privilege Manager sees that it requires + elevation. We can detect Applications that specify "require elevation" in the manifest and if the + application is a Legacy Installer (that is, a 32-bit app without a manifest and with a + keyword—e.g. Install, Setup, etc.—in the file info). It should be noted that Endpoint Policy + Manager (formerly PolicyPak) Least Privilege Manager does not support detection of dynamically + elevated processes. +- Audit elevated applications - Makes audit log entries for processes that runelevated (i.e., + successful runs after applications are elevated). This creates an event, regardless of the reason + why the application runs elevated. Examples scenarios for this case could include apps that always + require elevation, apps that require elevation only when run by an admin (e.g. regedit), or + situations in which a user selected to run a file as an administrator. It should be noted that the + only time this setting will not write an event to the event log (as an AUDIT event) is when there + is a Endpoint Policy Manager (formerly PolicyPak) Least Privilege Manager rule in place to perform + the elevation, in which case it would get its own event ID type. +- Audit untrusted applications - Discovers rules needed when SecureRun™ is turned on. If an + application is attempted, but the item’s file owner is not in the SecureRun™ list, then the + application will be blocked when SecureRun is turned on. +- Audit unsigned applications - Discovers rules needed when SecureRun™ is turned on and the “Block + all unsigned” option would block unsigned applications. + +We'll discuss each of these auditing events in the next sections. diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/events/auditingsettings/standardusers.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/events/auditingsettings/standardusers.md similarity index 86% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/events/auditingsettings/standardusers.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/events/auditingsettings/standardusers.md index 4b523e15a2..55cebffb72 100644 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/events/auditingsettings/standardusers.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/events/auditingsettings/standardusers.md @@ -14,10 +14,7 @@ scenario which requires UAC prompts, but there is no rule yet in place to overco Here, you can see what happens when a Standard User attempts to run **Turn Windows features on or off**. -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/events/auditingsettings/discovery_for_elevated_apps_1.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/events/auditingsettings/discovery_for_elevated_apps_1.webp) :::note At this time, Endpoint Policy Manager (formerly PolicyPak) Least Privilege Managerr diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/events/auditingsettings/standardusersuntrusted.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/events/auditingsettings/standardusersuntrusted.md similarity index 91% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/events/auditingsettings/standardusersuntrusted.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/events/auditingsettings/standardusersuntrusted.md index 38ee9873f7..d260c50fc4 100644 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/events/auditingsettings/standardusersuntrusted.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/events/auditingsettings/standardusersuntrusted.md @@ -17,10 +17,7 @@ user was a Local Admin or a Standard User. When **Audit untrusted applications** can see Event 6210 is generated, indicating that this application would have been blocked when SecureRun™ was enabled. -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/events/auditingsettings/discovery_of_untrusted_standard.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/events/auditingsettings/discovery_of_untrusted_standard.webp) The audit is only triggered when one of the following is true: diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/events/client.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/events/client.md new file mode 100644 index 0000000000..3248b5df44 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/events/client.md @@ -0,0 +1,13 @@ +--- +title: "Client Events" +description: "Client Events" +sidebar_position: 10 +--- + +# Client Events + +There is only one event ID for Endpoint Policy Manager Least Privilege Manager Client events. That +is Event 100, which describes when a User or Computer picks up new Endpoint Policy Manager Least +Privilege Manager policies. An example of this kind of event can be seen here. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/events/client_events.webp) diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/events/cloud.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/events/cloud.md new file mode 100644 index 0000000000..98440e84c2 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/events/cloud.md @@ -0,0 +1,47 @@ +--- +title: "Creating Policy from Endpoint Policy Manager Cloud Events" +description: "Creating Policy from Endpoint Policy Manager Cloud Events" +sidebar_position: 50 +--- + +# Creating Policy from Endpoint Policy Manager Cloud Events + +In order to receive Endpoint Policy Manager reports for events via Endpoint Policy Manager Cloud +Event Collector, you will need to complete the following steps: + +- Submit a support ticket to activate the Cloud Event Log Collector +- Trialers/Customers will only have a one-day event collection offered at no cost +- 7 Day, 14 Day, or 30 Day storage intervals for retained events + +**Step 1 –** Select the Company Group you want to push events to Endpoint Policy Manager Cloud and +select **Edit Group**. + +![creating_policy_from_policypak](/images/endpointpolicymanager/leastprivilege/events/createpolicy/creating_policy_from_endpointpolicymanager.webp) + +**Step 2 –** Select the **Event Collector**,Refresh interval for computers time setting. + +![creating_policy_from_policypak_1](/images/endpointpolicymanager/leastprivilege/events/createpolicy/creating_policy_from_endpointpolicymanager_1.webp) + +**Step 3 –** Select the Event IDs you want to collect. + +![creating_policy_from_policypak_2](/images/endpointpolicymanager/leastprivilege/events/createpolicy/creating_policy_from_endpointpolicymanager_2.webp) + +:::note +You can select the drop-down option to select the Event IDs. See the +[List of Endpoint Policy Manager Event Categories and IDs](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/eventcategories.md) topic +for a list of Endpoint Policy Manager Event IDs. +::: + + +**Step 4 –** Go to the Reports section to see the events that have been generated. + +![creating_policy_from_policypak_3](/images/endpointpolicymanager/leastprivilege/events/createpolicy/creating_policy_from_endpointpolicymanager_3.webp) + +**Step 5 –** Use the Generate Rule(s) wizard to create policies from forwarded events. + +![creating_policy_from_policypak_4](/images/endpointpolicymanager/leastprivilege/events/createpolicy/creating_policy_from_endpointpolicymanager_4.webp) + +**Step 6 –** Final Result: a Rule is created and you can edit the policy name and/or change the +conditions if needed. + +![creating_policy_from_policypak_5](/images/endpointpolicymanager/leastprivilege/events/createpolicy/creating_policy_from_endpointpolicymanager_5.webp) diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/events/operational.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/events/operational.md similarity index 81% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/events/operational.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/events/operational.md index 89e9f8048e..4cc272de62 100644 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/events/operational.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/events/operational.md @@ -13,7 +13,7 @@ Events in section are divided into the following categories: - Audit/Discovery events (Event ID 6200+) - Admin Approval events (Event ID 6300+) -See the [List of Endpoint Policy Manager Event Categories and IDs](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/eventcategories.md) +See the [List of Endpoint Policy Manager Event Categories and IDs](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/eventcategories.md) topic for all event IDs. Each event ID will have the following fields: @@ -53,14 +53,8 @@ The reason code that is written to Event 6310 is from a fixed list in the Endpoi Least Privilege Manager code generator tool and is not admin- or user-definable. When the admin chooses a reason code, as seen here, that is what is recorded within the event on the client. -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/events/operational_events.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/events/operational_events.webp) An example of Event 613 can be seen here. -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/events/operational_events_1.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/events/operational_events_1.webp) diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/events/overview.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/events/overview.md new file mode 100644 index 0000000000..53f130ed91 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/events/overview.md @@ -0,0 +1,58 @@ +--- +title: "Discovery, Auditing, and Events" +description: "Discovery, Auditing, and Events" +sidebar_position: 110 +--- + +# Discovery, Auditing, and Events + +Endpoint Policy ManagerLeast Privilege Manager uses Windows event logs to generate interesting +events that you can audit. You can use these events to audit what has occurred. + +:::note +See the [Events](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/eventing/events.md) video for a demo of the Endpoint +Policy Manager Least Privilege Manager Events in action. +::: + + +You can also use these events, before you fully roll out Endpoint Policy Manager Least Privilege +Manager, to discover what rules you would need to make when you transition from local admin rights +to SecureRun™. + +:::note +See the +[Use Discovery to know what rules to make as you transition from Local Admin rights](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/eventing/discovery.md) +video for a demo of Endpoint Policy Manager Least Privilege Manager Discovery in action. +::: + + +Events are logged on each endpoint machine and only when the interesting event occurs. You can find +Endpoint Policy Manager Least Privilege Manager events inside Event Viewer in the Application and +Services folder and under the Endpoint Policy Manager node. Once you get an understanding of +Endpoint Policy Manager Least Privilege Manager and events, you might want to set up event +forwarding to capture and forward events from multiple machines. In this way you can see what +multiple users are doing and look through the events for interesting ideas to convert into rules. + +- See the + [How to forward interesting events for Least Privilege Manager (or anything else) to a centralized location using Windows Event Forwarding.](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/eventing/windowseventforwarding.md) + topic to learn more about event forwarding. +- You can also use Netwrix Auditor to capture events from endpoints to bring them to a centralized + source for investigation. See the + [How to use Netwrix Auditor to Report on Endpoint Policy Manager events](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/eventing/reports.md) + topic for additional information. +- You can use Azure Log Analytics to store Endpoint Policy Manager Least Privilege Manager events. + See the + [Windows 10 (and Server) Event Logs to Azure Log Analytics Walkthru](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/eventlogs.md) + topic for additional information. +- You can use Endpoint Policy Manager Cloud to store Endpoint Policy ManagerLeast Privilege Manager + events and make rules from stored events. See the + [Endpoint Policy Manager Cloud + PPLPM + Events: Collect Events in the Cloud](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/eventing/cloudevents.md)video + for additional information. + +Endpoint Policy Manager Least Privilege Manager has two event sources, which can be seen in Event +Viewer. + +- Endpoint Policy Manager Least Privilege Manager Client +- Endpoint Policy Manager Least Privilege Manager Client—Operational + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/events/discovery_auditing_and_events.webp) diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overview.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overview.md new file mode 100644 index 0000000000..a26109010c --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overview.md @@ -0,0 +1,127 @@ +--- +title: "Endpoint Privilege Manager (Windows)" +description: "Endpoint Privilege Manager (Windows)" +sidebar_position: 10 +--- + +# Endpoint Privilege Manager (Windows) + +About Netwrix Endpoint Policy Manager (formerly PolicyPak) Least Privilege Manager + +Before reading this section, please ensure you have read the +[Installation Quick Start](/docs/endpointpolicymanager/gettingstarted/overviewinstall/overviewinstall.md) topics, which will help +you learn to do the following: + +- Install the Admin MSI on your GPMC machine +- Install the CSE on a test Windows machine +- Set up a computer in Trial or Licensed mode +- Set up a common OU structure + +Optionally, this manual demonstrates how to use on-prem Active Directory and Group Policy to deploy +Endpoint Policy Manager Least Privilege Manager directives. If you don't want to use Group Policy, +read the [MDM & UEM Tools](/docs/endpointpolicymanager/gettingstarted/mdmmanual/overview.md) topics for additional information on how to deploy +your directives. + +Endpoint Policy Manager Least Privilege Manager enables you to do the following: + +- Get out of the risky business of giving users local admin rights. +- Shut the door on malware, crypto-malware, and zero-day exploits. +- Let non-admins safely install software they need, on-demand. +- Elevate specific scripts to run as needed (without insecurely embedding the script password inside + the script file). +- Elevate specific Java JAR files to run in this way, as needed. + +For instance, you don’t want to block your Standard Users from running applications that throw a UAC +prompt. A Standard User doesn’t have the right permissions, and that’s where Endpoint Policy Manager +Least Privilege Manager can come in. + +:::note +For more information on this issue, watch the +[Kill Local Admin Rights (Run applications with Least Privilege)](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/localadminrights.md) +video. +::: + + +The basic way to use Endpoint Policy Manager Least Privilege Manager is as follows: + +- Remove local admin rights from all users. +- Create a rule to specify which applications, Control Panel applets, or other areas a user would + need admin rights to. +- Create a Endpoint Policy Manager SecureRun™ rule to prevent all unknown applications from running + (optional, but recommended). +- Use On-Prem Group Policy to accept the Endpoint Policy Manager Least Privilege Manager policies + created. (This is what this guide will demonstrate.) +- Alternatively, export the Endpoint Policy Manager Least Privilege Manager rules and deliver them + in one of these ways: + + - Microsoft SCCM (See theDeploy Endpoint Policy Manager Settings Using SCCM or Other Management + System! video overview for additional information.) + - Microsoft Intune (See the + [Using Least Privilege Manager with your MDM service](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/methods/mdm.md) video + overview for additional information.) + - Your own systems management software (PDQ Deploy or similar) (See the + [Deploying Apps that Require Admin Rights Using Endpoint Policy Manager and PDQ Deploy](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/methods/pdqdeploy.md) + video overview for additional information.) + - Endpoint Policy Manager Cloud service (See the + [Use Endpoint Policy Manager Cloud to deploy PP Least Privilege Manager rules](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/methods/cloudrules.md) + video overview for additional information.) + +Then allow the client machine with the Endpoint Policy Manager client-side extension (CSE) to +receive the directives and perform the work. + +:::note +If you use an MDM service or Endpoint Policy Manager cloud service, you can deliver +Endpoint Policy Manager Least Privilege Manager settings even to non-domain-joined machines over the +Internet. +::: + + +## Endpoint Privilege Manager Moving Parts + +First thing is to understand the moving parts. + +- A management station. The Endpoint Policy Manager Admin Console MSI must be installed on the + management station where you create GPOs. Once it’s installed, you’ll see the Endpoint Policy + Manager | Endpoint Policy Manager Least Privilege Manager node, as shown below. +- The Endpoint Policy Manager CSE. This runs on the client (target) machine and is the same CSE for + all Endpoint Policy Manager components (such as Endpoint Policy Manager Least Privilege Manager, + Endpoint Policy Manager Device Manager, Endpoint Policy Manager Application Settings Manager, + etc.). +- Windows Endpoints. In order to use these, they must be licensed for Endpoint Policy Manager Least + Privilege Manager using one of the licensing methods. +- Mac Endpoints (optional). Mac endpoints must use Endpoint Policy Manager Cloud to get Endpoint + Policy Manager Least Privilege Manager directives. See more in the Endpoint Policy Manager Cloud + for MacOS Client manual. + +Also available is Endpoint Policy Manager Cloud when you purchase Endpoint Policy Manager Enterprise +or Endpoint Policy Manager SaaS. + +Endpoint Policy Manager Cloud enables you to create Endpoint Policy ManagerLeast Privilege Manager +directives using the in-cloud editors and connect endpoints (Windows and Mac) to get Endpoint Policy +Manager Least Privilege Manager directives. + +![overview1](/images/endpointpolicymanager/leastprivilege/overview1.webp) + +While this manual mostly demonstrates concepts using the Group Policy editor, nearly everything can +be done using the in-Endpoint Policy Manager-Cloud editors. Additionally, you can take on-prem MMC +directives and upload them to Endpoint Policy Manager Cloud, and take in-cloud directives and +download them back as MMC directives. + +Additionally, you may use Endpoint Policy Manager Least Privilege Manager with any management system +you like such as SCCM, Intune, PDQ deploy or anything else. This is because Endpoint Policy Manager +Least Privilege Manager directives may be exported as XML and wrapped up using the Endpoint Policy +Manager Exporter tool. This is a free utility that lets you take Endpoint Policy Manager Admin +Templates Manager and our other products’ XML files and wrap them into a portable MSI file for +deployment using Microsoft Endpoint Manager (SCCM and Intune), or your own systems management +software. + +The [MDM & UEM Tools](/docs/endpointpolicymanager/gettingstarted/mdmmanual/overview.md) topics explain how to use the Endpoint Policy Manager +Exporter to wrap up any Endpoint Policy Manager directives and deliver them using Microsoft Endpoint +Manager (SCCM and Intune), KACE, your own MDM service, or Endpoint Policy Manager Cloud. + +In other words, you are free to use any delivery methodof your choice with Endpoint Policy Manager +Least Privilege Manager. + +This manual is designed to give you the basic concepts and operational scenarios you may encounter, +but once you get those down, you are free to use whatever delivery method is best for your +organization. diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overview_1.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overview_1.md new file mode 100644 index 0000000000..6d007da098 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overview_1.md @@ -0,0 +1,109 @@ +--- +title: "Troubleshooting" +description: "Troubleshooting" +sidebar_position: 120 +--- + +# Troubleshooting + +Endpoint Policy Manager Least Privilege Manager problems can generally be divided into three +categories: + +- Case 1: You expected a rule to bypass UAC, but it did not. +- Case 2: A rule is bypassing UAC, and it was not expected. +- Case 3: A rule is preventing an item from running when not expected. + +In all cases, you can see detailed information about the occurrence within the Endpoint Policy +Manager Least Privilege Manager log files which are found in: +`%appdata%\local\PolicyPak\PolicyPak Least Privilege Manager and %Programdata%\PolicyPak\PolicyPak Least Privilege Manager` + +First, you need to open the correct log file, based on the activity that has occurred, to see which +Endpoint Policy Manager Least Privilege Manager policies you have. There are several files to check: + +- ppUser_OnLogon.log. This log gets new data when Group Policy applies at logon, and items are set + for the User side, not the Computer side. +- ppUser_Switched.log. This log file is updated when Group Policy applies at logon, but items are + set for the Computer side. +- ppUser_OnGroupPolicy.log. This log gets new data when Group Policy applies in the background when + GPupdate is run, or when Group Policy applies in the background. +- ppUser_onPolicyChanged.log. This log file is updated when Group Policy applies in the background, + or when a non-Group Policy method is used (e.g., Microsoft Endpoint Manager (SCCM and Intune) or + Endpoint Policy Manager Cloud). + +Start troubleshooting by verifying that the following conditions (seen here) are true: + +- You have the GPO (or file). +- There is a collection within the GPO. +- The rules are within the collection. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/troubleshooting/leastprivilege/troubleshooting_1.webp) + +The final log to check is the ppUser_Operational.log, which can indicate why something is denied +(blocked), allowed, or elevated. It shows what was trying to run and which GPO, collection, and +policy performed the action, along with the ultimate result. For example, this log shows a Deny +result. + +![A screenshot of a computer code Description automatically generated](/images/endpointpolicymanager/troubleshooting/leastprivilege/troubleshooting_2.webp) + +An Allowed result can be seen here. + +![A screenshot of a computer code Description automatically generated](/images/endpointpolicymanager/troubleshooting/leastprivilege/troubleshooting_3.webp) + +An Elevated result can be seen here. + +![A screenshot of a computer code Description automatically generated](/images/endpointpolicymanager/troubleshooting/leastprivilege/troubleshooting_4.webp) + +Additionally, as expressed earlier, you can also see when Admin Approval dialogs are shown to end +users, when they are canceled, and which processes failed to run because they did not get +Administrator privileges. In this screenshot you can see that the dialog was canceled, which means +the end user was not permitted to perform an action which required a UAC prompt. + +![A screenshot of a computer program Description automatically generated](/images/endpointpolicymanager/leastprivilege/adminapproval/avoid_pop_ups_with_admin_approval_1.webp) + +Additionally, Admin Approval is logged in the ppUser_Operational.log file as well, which shows when +applications require Admin privileges and when the user successfully enters in a response code from +an Admin when he or she uses the Endpoint Policy Manager Admin Approval Tool. + +:::note +The Reason Code is also stored here and is a fixed list from within the Endpoint Policy +Manager Admin Approval Tool. +::: + + +``` +Admin Approval Dialog (2018/07/14, 15:55:20.312, PID: 1360, TID: 3020) +{ +    Process requires administrator privileges +    Dialog Guide: {3F8058CB-AB08-F878-D146-78312F2B7031} User Sid: S-1-5-    21-934088035-149717768-3671783038-1116 +    User Name: FABRIKAM\EastSalesUser1 Process Id: 7072 +    Process Path: C:\Users\eastsalesuser1\Desktop\Silverlight install.exe +    Command Line: "C:\Users\eastsalesuser1\Desktop\Silverlight install.exe" +    Task Kind: ApplicationInstaller  +    Task Hash: +25AA5CA53202838E3937FCFF39B3DB34C6B5A7188D28F45D7BFEDE81CF37ED6D +    Executable: C:\Users\eastsalesuser1\Desktop\Silverlight install.exe +    File Owner Sid: S-1-5-21-934088035-149717768-3671783038-1116 +    File Owner Name: FABRIKAM\EastSalesUser1 Trusted: No +    Signed: Yes +} // End of Admin Approval Dialog, elapsed time: 00:00:00.001 +Admin Approval Dialog (2018/07/14, 15:56:10.279, PID: 1360, TID: 2920) +{ +    Dialog success +    Dialog Guid: S-1-5-21-934088035-149717768-3671783038-1116 User Sid: S-1-5-21-934088035-149717768-3671783038-1116 +    User Name: FABRIKAM\EastSalesUser1 Process Id: 7072 +    Process Path: C:\Users\eastsalesuser1\Desktop\Silverlight install.exe +    Command Line: "C:\Users\eastsalesuser1\Desktop\Silverlight install.exe" +    Task Kind: ApplicationInstaller  +    Task Hash: +25AA5CA53202838E3937FCFF39B3DB34C6B5A7188D28F45D7BFEDE81CF37ED6D +    Executable: C:\Users\eastsalesuser1\Desktop\Silverlight install.exe +    File Owner Sid: S-1-5-21-934088035-149717768-3671783038-1116 +    File Owner Name: FABRIKAM\EastSalesUser1 Trusted: No +    Signed: Yes +    Reason: Application_LOB  +    Forced Elevation: No + +``` + +If requested by support, logs are automatically wrapped up and can be sent to Netwrix Support with +the PPLOGS.EXE command on any endpoint where the client-side extension is installed. diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/_category_.json new file mode 100644 index 0000000000..220827a91e --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Best Practices and Miscellaneous Topics", + "position": 80, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overviewmisc" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/acltraverse.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/acltraverse.md new file mode 100644 index 0000000000..f61f51155e --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/acltraverse.md @@ -0,0 +1,57 @@ +--- +title: "Understanding ACL Manage File System and Registry (ACL Traverse)" +description: "Understanding ACL Manage File System and Registry (ACL Traverse)" +sidebar_position: 50 +--- + +# Understanding ACL Manage File System and Registry (ACL Traverse) + +Endpoint Policy Manager Least Privilege Manager enables Standard Users to perform operations in the +file system or registry where they would not normally have access. To do this, you’ll assign a +process which, when run, will determine which operations can be performed on a file or portion of +the registry. + +Start out by creating a rule. In this case we want to specify an application process, like Notepad, +to perform an operation like Write the HOSTS file. + +First specify the process match and signify you want to perform **ACL manage file system and +registry**. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/understanding_acl_manage_file.webp) + +Next, specify the path(s) to files or registry and change the Permission (using the dropdown or +**Edit permissions** button.) + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/understanding_acl_manage_file_1.webp) + +As a result, when Notepadis run from the specified location it can edit the +`c:\windows\system32\drivers\etc\hosts` file. + +:::note +See the +[Endpoint Policy Manager and ACL Traverse: How to give rights to modify HOSTS files and similar](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/acltraverse/modifyhosts.md) +video for a demo on how to use ACL Traverse to modify the hosts file. +::: + + +:::note +See the +[Endpoint Policy Manager: ACL Traverse to enable users to delete icons on desktop](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/acltraverse/deleteicons.md) +video for a demo on how to use ACL Traverse to delete icons on the desktop. +::: + + +:::note +See the +[Endpoint Policy Manager ACL and File Traverse: Let any application in Programfiles overcome NTFS permissions](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/acltraverse/ntfspermissions.md) +video for a demo on how to use ACL Traverse to let any application in Programfiles overcome NTFS +permissions. +::: + + +:::note +See the +[Endpoint Policy Manager: Overcome ACLs in Registry even as Standard User](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/acltraverse/registry.md) +video for a demo of ACL Traverse and Registry. + +::: diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/bestpractices/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/bestpractices/_category_.json new file mode 100644 index 0000000000..e4af4197a0 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/bestpractices/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Best Practices", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/bestpractices/childprocesses.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/bestpractices/childprocesses.md similarity index 86% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/bestpractices/childprocesses.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/bestpractices/childprocesses.md index a47f7f7863..2592c12f10 100644 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/bestpractices/childprocesses.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/bestpractices/childprocesses.md @@ -8,16 +8,13 @@ sidebar_position: 60 :::note See the -[Security and Child Processes](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/securitychildprocesses.md) +[Security and Child Processes](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/securitychildprocesses.md) video for an overview of using Endpoint Policy Manager (formerly PolicyPak) Least Privilege Manager and Child Processes rules. ::: -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/bestpractices/when_to_use_apply_to_child.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/bestpractices/when_to_use_apply_to_child.webp) We suggest leaving the checkbox on for **Apply to Child Processes** when installing software. This will enable a `Setup.exe` to elevate anything it unpacks and needs to continue to install. However, diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/bestpractices/commandline.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/bestpractices/commandline.md new file mode 100644 index 0000000000..4150df5827 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/bestpractices/commandline.md @@ -0,0 +1,76 @@ +--- +title: "Creating and Using Command Line Rules" +description: "Creating and Using Command Line Rules" +sidebar_position: 40 +--- + +# Creating and Using Command Line Rules + +From time to time, you may encounter a situation in which an application only runs from the command +line, or there is an application that you want to run with specific command-line arguments. This +could occur in day-to-day use or with items that must run from a logon script and perform the task +with elevated rights. + +:::note +See the +[Prevent Users Running some commands with command lines](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/preventusercommands.md) +video for an overview of using Endpoint Policy Manager (formerly PolicyPak) Least Privilege Manager +and command-line arguments. +::: + + +A good example would be enabling standard users to start and stop services with a command line, or +to run the Performance Monitor’s Resource Monitor. Both must be executed from the command line. + +A Combo rule addresses this issue, by using Path and Command-line argument rules. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/bestpractices/rules/creating_and_using_command.webp) + +The first step, as shown here, is to specify the Path Condition, such as +`%SYSTEMROOT%\System32\sc.exe`. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/bestpractices/rules/creating_and_using_command_1.webp) + +For the command-line arguments in this example, the argument **stop wsearch**, which stops the +Windows Search Service, is specified. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/bestpractices/rules/creating_and_using_command_2.webp) + +For **Check Mode**, there are four choices: + +- Strict empty - Command must have no arguments. +- Strict equality - This means the Command and Rule will be elevated (or otherwise run) when the + arguments are exactly as you specify in the same order, with no variance. +- Ignore arguments order - This means the Command and Rule will be elevated (or otherwise run) when + all the arguments are in place, regardless of the order. +- Any argument from the list - This means that any argument in the Arguments box (separated by + spaces) is allowed in the command. + +:::note +Ignore arguments order and **Any argument from the list** only work when the command has +slash-based switches. If the command line doesn’t have slashes, then use the **Strict equality** +method. +::: + + +On the next screen, for **Action**, select **Run with elevated privileges**. + +The net result is that **standard users** can now stop the `wsearch` service without needing +elevated rights. + +![A computer screen with a black and white text Description automatically generated](/images/endpointpolicymanager/leastprivilege/bestpractices/rules/creating_and_using_command_3.webp) + +Another example would be to enable Standard Users to perform their own Registry merge. To do this, +make a Combo rule, which starts with the Path Condition running `%SYSTEMROOT%\System32\reg.exe` (not +shown). + +For the Command-line Arguments, select **Strict equality**, and then specify the location of the +.REG file, perhaps on a secure file server, as demonstrated here. + +![A screenshot of a computer + +Description automatically +generated](/images/endpointpolicymanager/leastprivilege/bestpractices/rules/creating_and_using_command_4.webp) + +Since the arguments are being specified, a user cannot add their own .REG files; they can only add +those specified by the admin (e.g., on a server where they could only read and not modify it). diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/bestpractices/dontelevate.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/bestpractices/dontelevate.md similarity index 89% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/bestpractices/dontelevate.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/bestpractices/dontelevate.md index 262489559a..391f558ff4 100644 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/bestpractices/dontelevate.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/bestpractices/dontelevate.md @@ -8,17 +8,14 @@ sidebar_position: 50 :::note For more information see the -[Increase security by reducing rights on Open/Save dialogs](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/opensavedialogs.md) +[Increase security by reducing rights on Open/Save dialogs](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/opensavedialogs.md) video on this topic. ::: The default on all rules is **Don't Elevate the Open/Save dialog**. -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/bestpractices/when_to_use_don_t_elevate.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/bestpractices/when_to_use_don_t_elevate.webp) In general it should be left as is, unless there is a reason to change it. diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/bestpractices/examplesavoid.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/bestpractices/examplesavoid.md similarity index 100% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/bestpractices/examplesavoid.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/bestpractices/examplesavoid.md diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/bestpractices/executablecombo.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/bestpractices/executablecombo.md similarity index 96% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/bestpractices/executablecombo.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/bestpractices/executablecombo.md index 2396cf188e..48c006b0d6 100644 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/bestpractices/executablecombo.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/bestpractices/executablecombo.md @@ -26,7 +26,7 @@ However, you can start off on the right foot by making your own Combo rules. :::note See the -[More security with Combo Rules](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/securitycomborules.md) video for an +[More security with Combo Rules](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/securitycomborules.md) video for an overview of using Endpoint Policy Manager Least Privilege Manager and Combo rules. ::: diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/bestpractices/fileinfo.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/bestpractices/fileinfo.md new file mode 100644 index 0000000000..ea15249519 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/bestpractices/fileinfo.md @@ -0,0 +1,72 @@ +--- +title: "Deeper Dive on File Info" +description: "Deeper Dive on File Info" +sidebar_position: 20 +--- + +# Deeper Dive on File Info + +The **File Info Condition** enables you to match inner criteria of your EXE or MSI. In this example, +we have selected the **Process Monitor**, and the **File Info** and **Product Info** have been +populated. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/bestpractices/deeper_dive_on_file_info.webp) + +The MMC-based File Info editor can read file attributes and perform work depending on the internal +values of the program. + +- **File Info Name** and **File Info Version** in the Endpoint Policy Manager (formerly PolicyPak) + Least Privilege Manager GUI correspond to **File description** and **File version** in the file’s + internal values, as highlighted in red in these examples. +- **Product Info Name** and **Product Info Version** in the Endpoint Policy Manager (formerly + PolicyPak) Least Privilege Manager GUI correspond to **Product Name** and **Product Version** in + the file’s internal values, as highlighted in blue in these examples. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/bestpractices/deeper_dive_on_file_info_1.webp) + +This screen shot shows an older iTunes Setup as an additional example. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/bestpractices/deeper_dive_on_file_info_2.webp) + +MSI files have different characteristics than EXE files, so Endpoint Policy Manager Least Privilege +Manager has a different GUI when you are using the **File Match** condition. Here you can see the +MSI and File Match GUI after Skype Installer MSI has been selected. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/bestpractices/deeper_dive_on_file_info_3.webp) + +Getting the product code from the file system isn’t possible, which is why you need the Endpoint +Policy Manager File Information Viewer. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/bestpractices/deeper_dive_on_file_info_4.webp) + +To get to the information you need, use the Endpoint Policy Manager File Information Viewer (found +in the Extras folder in the Download) and select the application to see some of the MSI internals, +as shown here. + +Product Info match for MSI files will match on all the fields highlighted in red: + +- Product Version +- Manufacturer +- Product Code +- Upgrade Code + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/bestpractices/deeper_dive_on_file_info_5.webp) + +One way to use File Info match could be to make a rule that says, "Allow install of Skype Setup +.MSI, provided it is version 7 or later." In order to do that, you would make an MSI Combo rule with +three conditions, as shown here. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/bestpractices/deeper_dive_on_file_info_6.webp) + +The three conditions could be: + +- Path Condition - the name of the File (SkypeSetup.Msi) +- Signature Condition - the digital signature of Skype Technologies S.A. +- Product Info - a version higher than 7.0 + +You can see the **Product Info Condition** here. You can also see that you can add additional GUIDs +for matching MSI product codes. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/bestpractices/deeper_dive_on_file_info_7.webp) + +This makes the **Product Info Condition** a powerful tool, when used alone or with a Combo rule. diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/bestpractices/overview.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/bestpractices/overview.md new file mode 100644 index 0000000000..77b8ce221e --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/bestpractices/overview.md @@ -0,0 +1,24 @@ +--- +title: "Best Practices" +description: "Best Practices" +sidebar_position: 10 +--- + +# Best Practices + +:::note +See the +[Best Practices for Elevating User-Based Installs](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/elevatinguserbasedinstalls.md) +video for an overview of Endpoint Policy Manager Least Privilege Manager best practices. +::: + + +Endpoint Policy Manager (formerly PolicyPak) Least Privilege Manager’s job is to overcome UAC +prompts which normally stop users from being productive. However, you always want to make sure you +are putting Endpoint Policy Manager (formerly PolicyPak) Least Privilege Manager to work in the +ideal way, and not over-permission an application, which could be a security concern. + +When possible use the Best Practice Signature Condition alongside and File Info condition as a Combo +rule. This is because both of these items have digital signatures. + +With that in mind, let’s go over some “What not to dos” before we continue on with Best Practices. diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/export.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/export.md new file mode 100644 index 0000000000..4a30ed6ca3 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/export.md @@ -0,0 +1,30 @@ +--- +title: "Exporting Policies and Collections" +description: "Exporting Policies and Collections" +sidebar_position: 100 +--- + +# Exporting Policies and Collections + +The [MDM & UEM Tools](/docs/endpointpolicymanager/gettingstarted/mdmmanual/overview.md) topics explain how to use the Endpoint Policy Manager +Exporter to wrap up any Endpoint Policy Manager directives and deliver them using Microsoft Endpoint +Manager (SCCM and Intune), KACE, your own MDM service, or Endpoint Policy Manager Cloud. To export a +policy for later use using Endpoint Policy Manager Exporter or Endpoint Policy Manager Cloud, +right-click the collection or the policy and select **Export to XML**. This will enable you to save +an XML file, which you can use later. + +:::note +For more information on how to use Endpoint Policy Manager Least Privilege Manager and +Endpoint Policy Manager Cloud, please see the +[Use Endpoint Policy Manager Cloud to deploy PP Least Privilege Manager rules](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/methods/cloudrules.md) +and the [Using Least Privilege Manager with your MDM service](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/methods/mdm.md) +videos, +::: + + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/exporting_policies_and_collections.webp) + +:::note +Exported collections or policies maintain any Item-Level Targeting set within them. + +::: diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/itemleveltargeting.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/itemleveltargeting.md new file mode 100644 index 0000000000..ae52bbdd7e --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/itemleveltargeting.md @@ -0,0 +1,83 @@ +--- +title: "Item-Level Targeting with Collections and Policies" +description: "Item-Level Targeting with Collections and Policies" +sidebar_position: 70 +--- + +# Item-Level Targeting with Collections and Policies + +:::note +For more information on Endpoint Policy Manager Least Privilege Manager and Item Level +Targeting, please see the +[Endpoint Privilege Manager: Use Item Level Targeting to hone in when rules apply.](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/itemleveltargeting.md) +video. +::: + + +Item-Level Targeting is used in Microsoft Group Policy Preferences and other areas of Endpoint +Policy Manager to target or filter where specific items will apply. With Endpoint Policy +ManagerLeast Privilege Manager, Item-Level Targeting can be placed on collections as well as +Endpoint Policy Manager Least Privilege Manager policies within collections. + +A collection enables you to group together Endpoint Policy Manager Least Privilege Manager policies +so they can act together. For instance, you might create a collection for only East Sales Users and +another for West Sales Users. . + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/item_level_targeting_with.webp) + +Below you can see two created collections that can hold other collections or policies. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/item_level_targeting_with_1.webp) + +Right-click any Endpoint Policy Manager Least Privilege Manager Collection or Policy and select +**Change Item-Level Targeting**, to set filtering conditions on when the policy will apply. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/item_level_targeting_with_2.webp) + +The **Change Item Level Targeting** menu item brings up the Targeting Editor. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/item_level_targeting_with_3.webp) + +You can select any combination of characteristics you want to test for. Administrators familiar with +Group Policy Preferences’ Item-Level Targeting will be at home in this interface as it is +functionally equivalent. + +You can apply one or more targeting items to a policy, which enables targeting items to be joined +logically. You can also add targeting collections, which group together targeting items in much the +same way parentheses are used in an equation. In this way, you can create a complex determination +about where a policy will be applied. Collections may be set to **And**, **Or**, **Is**, or **Is +Not**. + +:::note +Additionally, Endpoint Policy Manager Least Privilege Manager allows you to target users +or user groups, even if the policy is on the computer side. See the +[Link to Computer, Filter by User](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/userfilter.md) video for details on this +superpower. +::: + + +Below are some real-world examples of how you can use Item-Level Targeting. + +- Software prerequisites. If you want to configure an application’s settings, first make sure the + application is installed on the user’s computer before configuring it. You can use File Match or + Registry Match targeting items (or both) to verify a specific version of a file, or a registry + entry is present. For an example of this, look in the Uninstall registry key. +- Mobile computers. If you want to deploy settings exclusively for users on mobile PCs, filter the + rule to apply only to mobile PCs by using the Portable Computer targeting item. +- Operating system version. You can specify different settings for applications based on the + operating system version. To do this, create one rule for each operating system and then filter + each rule using the Operating System targeting item. +- Group membership. You can link the Group Policy Object (GPO) to the whole domain or organizational + unit (OU), but only members within a specific group will pick up and process the rule settings. +- IP range. You can specify different settings for various IP ranges, like different settings for + the home office and each field office. + +After editing is completed, close the editor. The policy's icon, or the collection’s icon, has now +changed to orange, which shows that it has Item-Level Targeting, as well as the Column labeled Item +Level Targeting, as seen below. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/item_level_targeting_with_4.webp) + +When Item-Level Targeting is on, the policy won’t apply unless the conditions are true. If +Item-Level Targeting is applied to a collection, then none of the items in the collection will apply +unless the Item-Level Targeting on the collection evaluates to true. diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/overviewmisc.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/overviewmisc.md similarity index 100% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/overviewmisc.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/overviewmisc.md diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/parentprocessfilter.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/parentprocessfilter.md similarity index 83% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/parentprocessfilter.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/parentprocessfilter.md index c205d81466..e03eb2d884 100644 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/parentprocessfilter.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/parentprocessfilter.md @@ -17,7 +17,4 @@ In this example, an iTunes Helper application can only be installed if the iTune application is actually performing the action (in this case with **Signature** and **File Info** being checked first before the child application is launched elevated.) -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/understanding_parent_process.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/understanding_parent_process.webp) diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/processorderprecedence.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/processorderprecedence.md similarity index 92% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/processorderprecedence.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/processorderprecedence.md index d42e9b5d26..02eb354259 100644 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/processorderprecedence.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/processorderprecedence.md @@ -11,10 +11,7 @@ So lower-numbered collections attempt to process first, and higher-numbered coll process last. Then, within any collection, each policy is processed in numerical order from lowest to highest. -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/processing_order_and_precedence.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/processing_order_and_precedence.webp) Within any collection, each policy is processed in numerical order from lowest to highest. diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/reauthentication.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/reauthentication.md similarity index 92% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/reauthentication.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/reauthentication.md index 863c1a9a84..a699112da0 100644 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/reauthentication.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/reauthentication.md @@ -14,21 +14,18 @@ Here, on the left you’ll see a Self Elevate rule, and on the right a standard You can see both rule types have the options for **Require Justification Text** and **Force user to reauthenticate**. -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/understanding_re_authentication.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/understanding_re_authentication.webp) :::note See the -[Endpoint Policy Manager Least Priv Manager: Self Elevate Mode](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/selfelevatemode.md) +[Endpoint Policy Manager Least Priv Manager: Self Elevate Mode](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/selfelevatemode.md) video for a demonstration of Justification text for Self Elevate. ::: :::note See the -[Endpoint Privilege: Re-Authenticate with Self Elevate](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/reauthenticate.md) +[Endpoint Privilege: Re-Authenticate with Self Elevate](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/reauthenticate.md) video for a demonstration of re-authentication for Self Elevate. ::: diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/scopefilters/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/scopefilters/_category_.json new file mode 100644 index 0000000000..07512b4cbc --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/scopefilters/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Understanding Process Scoping & Filters", + "position": 30, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/scopefilters/blockadmins.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/scopefilters/blockadmins.md similarity index 97% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/scopefilters/blockadmins.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/scopefilters/blockadmins.md index 7da575d26e..07df08a9ad 100644 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/scopefilters/blockadmins.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/scopefilters/blockadmins.md @@ -8,7 +8,7 @@ sidebar_position: 40 :::note For an overview video of this section, see the -[Elevate apps as standard user, BLOCK other Admins](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/appblock.md) +[Elevate apps as standard user, BLOCK other Admins](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/appblock.md) video . ::: diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/scopefilters/blockapp.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/scopefilters/blockapp.md similarity index 95% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/scopefilters/blockapp.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/scopefilters/blockapp.md index 774aec77c4..77e556b99c 100644 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/scopefilters/blockapp.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/scopefilters/blockapp.md @@ -8,7 +8,7 @@ sidebar_position: 20 :::note For an overview of this scenario, see the -[Block PowerShell in General, Open up for specific items](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/powershellblock.md) +[Block PowerShell in General, Open up for specific items](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/powershellblock.md) video demo. ::: diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/scopefilters/blockpowershell.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/scopefilters/blockpowershell.md similarity index 100% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/scopefilters/blockpowershell.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/scopefilters/blockpowershell.md diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/scopefilters/elevateserviceaccount.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/scopefilters/elevateserviceaccount.md similarity index 93% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/scopefilters/elevateserviceaccount.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/scopefilters/elevateserviceaccount.md index a0198db8db..c4b92f570c 100644 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/scopefilters/elevateserviceaccount.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/scopefilters/elevateserviceaccount.md @@ -8,7 +8,7 @@ sidebar_position: 50 :::note For an overview of this scenario see the -[Reduce or specify Service Account Rights](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/serviceaccountrights.md) +[Reduce or specify Service Account Rights](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/serviceaccountrights.md) video. ::: @@ -17,7 +17,7 @@ You might have a service which requires specific privileges. Maybe your service, Local System, and you want to give it lessrights. With Endpoint Policy Manager -[Reduce or specify Service Account Rights](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/serviceaccountrights.md), +[Reduce or specify Service Account Rights](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/serviceaccountrights.md), you can remove the powerful privileges of the service account and strip out LOCAL SYSTEM and grant a specific user the permissions required. diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/scopefilters/enhancedsecurerun.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/scopefilters/enhancedsecurerun.md similarity index 91% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/scopefilters/enhancedsecurerun.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/scopefilters/enhancedsecurerun.md index 135c75ca20..977155c14e 100644 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/scopefilters/enhancedsecurerun.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/scopefilters/enhancedsecurerun.md @@ -8,7 +8,7 @@ sidebar_position: 10 :::note For an overview of this scenario, see the -[SecureRun to block User AND System executables](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/usersystemexecutables.md) +[SecureRun to block User AND System executables](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/usersystemexecutables.md) video demo. ::: @@ -24,10 +24,7 @@ However, you can switch SecureRun on the computer side to now say “Block all u started by users or LOCAL SYSTEM.” You would do this on the Computer side, and specify User and System Processes. -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/scopefilters/scenario_1_enhanced_securerun_1.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/scopefilters/scenario_1_enhanced_securerun_1.webp) The result is that both User and System attempts to run un-trusted executables will be prevented. diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/scopefilters/overview.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/scopefilters/overview.md new file mode 100644 index 0000000000..8c57dfa6d1 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/scopefilters/overview.md @@ -0,0 +1,30 @@ +--- +title: "Understanding Process Scoping & Filters" +description: "Understanding Process Scoping & Filters" +sidebar_position: 30 +--- + +# Understanding Process Scoping & Filters + +The **Scope** filter section can be found in various rule types in Endpoint Policy Manager Least +Privilege Manager. For instance, it exists in every explicit rule, like this: + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/scopefilters/understanding_process_scoping.webp) + +And also in SecureRun™ rules: + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/scopefilters/understanding_process_scoping_1.webp) + +:::note +The Policy Scope option for Processes is only available when used on the Computer side; on +the User side it is greyed out because this setting is only meant to express to the COMPUTER +(system) how to work with User and User and System Processes. On the User side, the processes are +always in the context of the User. However, the Scope filter for Users & Groups is available on the +User side. +::: + + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/scopefilters/understanding_process_scoping_2.webp) + +In this topic, we will explore various use cases when you might use the Policy Scope option (which +again, will only be un-gray / valid on the Computer side.) diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/securecopy.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/securecopy.md new file mode 100644 index 0000000000..5a3de8161c --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/securecopy.md @@ -0,0 +1,43 @@ +--- +title: "Understanding SecureCopy" +description: "Understanding SecureCopy" +sidebar_position: 40 +--- + +# Understanding SecureCopy + +:::note +See the +[SecureCopy(TM). Empower users to copy then elevate items](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/securecopy.md) +for a video overview demonstration. +::: + + +Endpoint Policy Manager Least Privilege Manager SecureCopy feature lets you create your own store +for users to take applications and installers which need elevation, and empower users to copy them +to a location of your (or their) choice, and perform the installation or running of the application. + +**Step 1 –** Start out by creating a SecureCopy™ policy. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/understanding_securecopy.webp) + +**Step 2 –** Specify a read only share for users. Pay careful attention to the warning here. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/understanding_securecopy_1.webp) + +**Step 3 –** Specify the target folder location. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/understanding_securecopy_2.webp) + +**Step 4 –** Specify the options. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/understanding_securecopy_3.webp) + +**Step 5 –** Finish the policy. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/understanding_securecopy_4.webp) + +The result is that users can now use the Copy with Endpoint Policy Manager SecureCopy™ feature to +copy items from your store to their locations and then perform automatic elevation on those items. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/understanding_securecopy_5.webp) diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/wildcards.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/wildcards.md new file mode 100644 index 0000000000..e256632677 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/wildcards.md @@ -0,0 +1,38 @@ +--- +title: "Using Wildcards with Endpoint Privilege Manager and Certificates" +description: "Using Wildcards with Endpoint Privilege Manager and Certificates" +sidebar_position: 60 +--- + +# Using Wildcards with Endpoint Privilege Manager and Certificates + +:::note +See the +[Endpoint Privilege Manager and Wildcards](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/wildcards.md) video +on how to use Endpoint Policy Manager Least Privilege Manager and Certificate Wildcards. +::: + + +Applications like Zoom, GotoMeeting, Webex and others often have certificates which change from time +to time. So even if you’ve set up the best practice of Certificate + File Info rules (like we +discussed in the [Best Practices](/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/bestpractices/overview.md) section), those automatic rules can go +out of date quickly. + +To allow Endpoint Policy Manager Least Privilege Manager to permit Wildcards in Certificate +matching, select Advanced Mode and then **Allow wildcards in Common Name**. This will flip the +certificate to be permitted to Wildcard mode. + +Now you can address the fields you need as Wildcards; in this example, we’ve specified L=\*. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/using_wildcards_with_endpointpolicymanager.webp) + +Endpoint Policy Manager Least Privilege Manager will continue to check all the intermediary +certificates along the way before it gets to the one you modified. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/using_wildcards_with_endpointpolicymanager_1.webp) + +:::warning +You want to try to be as restrictive as possible when using Wildcards; the more you +open up, the less secure you will be. + +::: diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/preconfiguredxmls.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/preconfiguredxmls.md new file mode 100644 index 0000000000..eedaf50609 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/preconfiguredxmls.md @@ -0,0 +1,44 @@ +--- +title: "Preconfigured XMLs" +description: "Preconfigured XMLs" +sidebar_position: 50 +--- + +# Preconfigured XMLs + +Endpoint Policy Manager Least Privilege Manager comes with some preconfigured XML files that help to +get you started quickly with a variety of common situations and applications. + +- See the + [Installing applications-and-Preconfigured-Rules](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/installapplications.md) + video for an overview of how to use preconfigured Endpoint Policy ManagerLeast Privilege Manager + XML examples. +- A common request is to overcome the Print dialog. As such we have a preconfigured rule to help + with that. See the + [Endpoint Privilege Manager: Install Printers via Native NTPRINT Dialog](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/helperstoolsandtips/ntprintdialog.md) + video for an example. +- Another common request is to overcome the Windows Ethernet & IP address GUI. As such we have a + preconfigured rule to help with that. See the + [Endpoint Privilege Manager: Edit IP SETTINGS EDIT VIA WIN GUI](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/helperstoolsandtips/wingui.md) + video for an example. + +First, to download the preconfigured XMLs, log onto the PolicyPak Portal, and click **Guidance XMLs +and Scripts (PPLPM, PPBR, PPFAM, & PPSCRIPTS)**. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/preconfigured_xmls.webp) + +Once these files are downloaded and unpacked, you’ll see a folder named \_PolicyPak Least Privilege +Manager XMLs. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/preconfigured_xmls_1.webp) + +If you want to enable users to install CutePDF Reader, you can use the preconfigured XML found in +the above folder and drag and drop it to the MMC editor. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/preconfigured_xmls_2.webp) + +After that, the application will install on the endpoints without requiring Admin rights for +installation. + +These examples may or may not work, depending on specific circumstances so be sure to test before +rolling out. diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/preferences.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/preferences.md new file mode 100644 index 0000000000..65ae6146e9 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/preferences.md @@ -0,0 +1,47 @@ +--- +title: "Using Group Policy Preferences to Manage Local Admin Groups" +description: "Using Group Policy Preferences to Manage Local Admin Groups" +sidebar_position: 130 +--- + +# Using Group Policy Preferences to Manage Local Admin Groups + +:::note +See the +[Use Group Policy to remove local admin rights (then Endpoint Policy Manager to enable Least Privilege)](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/removelocaladmin.md) +video for an overview of using Group Policy preference with Endpoint Policy Manager Least Privilege +Manager. +::: + + +Endpoint Policy ManagerLeast Privilege Manager is built on the principle of stripping local admin +rights for standard users and then giving them the exact privileges they need to do their jobs. To +fully utilize this strategy, you may need to start with a clean slate concerning the membership of +your Windows local admin groups. Before we do that, you should first confirm who the members of your +Domain Admins group are and make sure that no one is listed there who shouldn't be there. If so, +remove those accounts immediately. + +:::note +Doing this will create the need to do some cleanup in the local admins group on each +computer. +::: + + +Now let's move on to local admin groups. You can easily do this by creating a GPO, going to +**Computer Configuration** > **Preferences** > **Control Panel Settings** > **Local Users and +Groups** and select **Local Group** . + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/using_group_policy_preferences.webp) + +Next, you’ll use the **Update** action which has been selected by default along with the check box +to **Delete all member users**.  You may also want to select **Delete all member groups** as well.  +The first check box setting will delete any existing user members, including those remnant accounts +that were left after cleaning up the domain admins group in the prior step. This cleans out +everyone, which means you have to add back the accounts you want. Remember that you don't want to +allocate local admin groups to standard users, so only the domain admins group and the local admin +user account should be members. This is achieved by clicking the **Add** button and selecting them. + +![A screenshot of a group Description automatically generated](/images/endpointpolicymanager/leastprivilege/using_group_policy_preferences_1.webp) + +Once the policy is deployed, you will have removed all non-privileged users from the local admins +group of all targeted desktops. diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/privilegesecure/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/privilegesecure/_category_.json new file mode 100644 index 0000000000..cddb558b92 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/privilegesecure/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Endpoint Policy Manager & Netwrix Privilege Secure", + "position": 90, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/privilegesecure/client.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/privilegesecure/client.md new file mode 100644 index 0000000000..e426a66985 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/privilegesecure/client.md @@ -0,0 +1,56 @@ +--- +title: "Getting Started: Client" +description: "Getting Started: Client" +sidebar_position: 20 +--- + +# Getting Started: Client + +If you already have the Netwrix Endpoint Policy Manager (formerly PolicyPak) CSE installed on your +desired endpoint, great! That’s it, you’re done. However, in the Netwrix Privilege Secure download, +you will also find the Netwrix Endpoint Policy Manager (formerly PolicyPak) CSE available within the +Netwrix Privilege Secure download as a courtesy. + +Therefore, you may use either the Netwrix Endpoint Policy Manager (formerly PolicyPak) CSE found +either within the Netwrix Privilege Secure download, or the Netwrix Endpoint Policy Manager +(formerly PolicyPak) CSE found in the Netwrix Endpoint Policy Manager (formerly PolicyPak) download. + +:::note +See the +[Netwrix Privilege Secure Client - Getting Started with MMC with/without Endpoint Policy Manager ](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/netwrixprivilegesecure/privilegesecure.md)video +for a demo on the relationship of the Netwrix Privilege Secure and Netwrix Endpoint Policy Manager +(formerly PolicyPak) downloads and their moving parts. +::: + + +:::warning +It might be best to use the Netwrix Endpoint Policy Manager (formerly PolicyPak) CSE +download since the Netwrix Endpoint Policy Manager (formerly PolicyPak) CSE download may have +bugfixes, etc., which may not yet be available in the Netwrix Privilege Secure download due to lag +time. +::: + + +:::note +The interaction between Netwrix Privilege Secure and Netwrix Endpoint Policy Manager +(formerly PolicyPak) CSE does notneed to be licensed. When you evaluate or purchase Netwrix +Privilege Secure, the major Netwrix Endpoint Policy Manager (formerly PolicyPak) Least Privilege +Manager management and elevation functions are automatically available to you without needing to +install any specific endpoint license. +::: + + +- The Netwrix Endpoint Policy Manager (formerly PolicyPak) Least Privilege Manager directives which + are distributed as part ofNetwrix Privilege Secure server performing the brokering\*will work even + if unlicensed. +- The Netwrix Endpoint Policy Manager (formerly PolicyPak) specific items where there is no Netwrix + Privilege Secure server involved require a license. + +You can see the difference in the list view as seen here. + +![getting_started_client](/images/endpointpolicymanager/integration/privilegesecure/gettingstarted/getting_started_client.webp) + +In the next section we will see how to create Netwrix Endpoint Policy Manager (formerly PolicyPak) + +Netwrix Privilege Secure policies which will not need an endpoint license to work out of the box. +Again, the idea is that you are already paying for an Netwrix Privilege Secure license, and because +Netwrix Privilege Secure is involved in the policy, those policies work on the endpoint for free. diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/privilegesecure/gui.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/privilegesecure/gui.md similarity index 96% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/privilegesecure/gui.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/privilegesecure/gui.md index 9f9ece61a9..74a41cd394 100644 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/privilegesecure/gui.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/privilegesecure/gui.md @@ -46,7 +46,7 @@ Secure Console MSI. :::note See the -[Netwrix Privilege Secure Client - Getting Started with MMC with/without Endpoint Policy Manager ](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/netwrixprivilegesecure/privilegesecure.md) +[Netwrix Privilege Secure Client - Getting Started with MMC with/without Endpoint Policy Manager ](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/netwrixprivilegesecure/privilegesecure.md) video for a demo on the relationship between the Netwrix Privilege Secure and Endpoint Policy Manager downloads and moving parts. ::: diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/privilegesecure/overview.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/privilegesecure/overview.md new file mode 100644 index 0000000000..e9689de3fe --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/privilegesecure/overview.md @@ -0,0 +1,42 @@ +--- +title: "Endpoint Policy Manager & Netwrix Privilege Secure" +description: "Endpoint Policy Manager & Netwrix Privilege Secure" +sidebar_position: 90 +--- + +# Endpoint Policy Manager & Netwrix Privilege Secure + +The Endpoint Policy Manager CSE is the agent for Netwrix Privilege Secure. When paired together, you +get the following benefits: + +- You are able to launch applications (elevated or not) from a local desktop, and have them brokered + by the Netwrix Privilege Secure server +- Applications will launch with Netwrix Privilege Secure 2fa (built-in or 3rd party) +- Applications may launch elevated if desired +- The whole screen can be recorded and sent up to the Netwrix Privilege Secure server for + safekeeping and analysis + +Therefore, instead of relying on RDP to remote control into a server to perform a privileged +operation, maintaining a second set of credentials, and having nothing recorded for posterity, you +can use the Better Together power of Netwrix Privilege Secure and Endpoint Policy Manager CSE. + +The best part is, if you are only interested in the Endpoint Policy Manager + Netwrix Privilege +Secure Better Together story, you only have to pay for the Netwrix Privilege Secure licenses. That +is, there is no required endpoint license when Netwrix Privilege Secure is used alongside a Endpoint +Policy Manager directive (where Netwrix Privilege Secure is involved.) You will see more as we go +along but, if you are using Netwrix Privilege Secure and want to try out the power of Endpoint +Policy Manager, that is included in your Netwrix Privilege Secure license. + +:::note +See the +[Netwrix Privilege Secure Client - Getting Started with MMC with/without Endpoint Policy Manager ](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/netwrixprivilegesecure/privilegesecure.md)video +for a demo on the relationship of the Netwrix Privilege Secure and Endpoint Policy Manager downloads +and moving parts. +::: + + +:::note +All Netwrix Privilege Secure + Endpoint Policy Manager documentation from Netwrix +Privilege Secure can be found in [Netwrix Privilege Secure for Endpoints Documentation](https://helpcenter.netwrix.com/category/privilegesecure_endpoints). + +::: diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/privilegesecure/policymatch/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/privilegesecure/policymatch/_category_.json new file mode 100644 index 0000000000..66105d5c4d --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/privilegesecure/policymatch/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Credential Based Policy Match", + "position": 40, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "policymatch" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/privilegesecure/policymatch/policymatch.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/privilegesecure/policymatch/policymatch.md similarity index 100% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/privilegesecure/policymatch/policymatch.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/privilegesecure/policymatch/policymatch.md diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/privilegesecure/policymatch/releaseresults.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/privilegesecure/policymatch/releaseresults.md similarity index 100% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/privilegesecure/policymatch/releaseresults.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/privilegesecure/policymatch/releaseresults.md diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/privilegesecure/policymatch/setuppolicy.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/privilegesecure/policymatch/setuppolicy.md similarity index 100% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/privilegesecure/policymatch/setuppolicy.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/privilegesecure/policymatch/setuppolicy.md diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/privilegesecure/resourcebased/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/privilegesecure/resourcebased/_category_.json new file mode 100644 index 0000000000..f8f94b9641 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/privilegesecure/resourcebased/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Resource Based Policy Match", + "position": 50, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "policymatch_1" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/privilegesecure/resourcebased/closingbrokeredprocesses.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/privilegesecure/resourcebased/closingbrokeredprocesses.md similarity index 100% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/privilegesecure/resourcebased/closingbrokeredprocesses.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/privilegesecure/resourcebased/closingbrokeredprocesses.md diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/privilegesecure/resourcebased/policymatch_1.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/privilegesecure/resourcebased/policymatch_1.md similarity index 100% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/privilegesecure/resourcebased/policymatch_1.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/privilegesecure/resourcebased/policymatch_1.md diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/privilegesecure/resourcebased/storedvideos.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/privilegesecure/resourcebased/storedvideos.md similarity index 100% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/privilegesecure/resourcebased/storedvideos.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/privilegesecure/resourcebased/storedvideos.md diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/privilegesecure/together.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/privilegesecure/together.md similarity index 97% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/privilegesecure/together.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/privilegesecure/together.md index 4ef8b3c675..696e85a161 100644 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/privilegesecure/together.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/privilegesecure/together.md @@ -8,7 +8,7 @@ sidebar_position: 30 :::note See the -[Netwrix Privilege Secure and the NPS/Endpoint Policy Manager Client](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/netwrixprivilegesecure/privilegesecureclient.md) +[Netwrix Privilege Secure and the NPS/Endpoint Policy Manager Client](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/netwrixprivilegesecure/privilegesecureclient.md) video for an overview of Netwrix Privilege Secure + Endpoint Policy Manager better together. ::: diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/_category_.json new file mode 100644 index 0000000000..66d7182f6c --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Rules", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/activexitems.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/activexitems.md new file mode 100644 index 0000000000..51bc1923c3 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/activexitems.md @@ -0,0 +1,28 @@ +--- +title: "Elevating ActiveX Items" +description: "Elevating ActiveX Items" +sidebar_position: 70 +--- + +# Elevating ActiveX Items + +:::note +For an overview of Elevating ActiveX Items see the +[Overcome UAC prompts for Active X controls](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/uacpromptsactivex.md) video. +::: + + +ActiveX items are still important to many organizations who rely upon them. Even though Internet +Explorer isn’t available anymore, ActiveX controls still work in IE Mode for Windows 10 and 11 with +Edge. + +Trying to install ActiveX controls as a Standard User is not allowed. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_activex_items.webp) + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_activex_items_1.webp) + +You can use ActiveX rules and specify the CAB file you want to permit. + +Then, clicking on **Validate & Add** will attempt to determine if the CAB is signed and add that +requirement to the rule. diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/com_cslidclass.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/com_cslidclass.md new file mode 100644 index 0000000000..f73cdf697c --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/com_cslidclass.md @@ -0,0 +1,43 @@ +--- +title: "Elevating COM / CSLID Class Items" +description: "Elevating COM / CSLID Class Items" +sidebar_position: 60 +--- + +# Elevating COM / CSLID Class Items + +:::note +For an overview of COM Class Policies, see the +[COM Support](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/comsupport.md) video. +::: + + +COM items are a special type of Windows process and Endpoint Policy Manager can typically elevate +them if needed. Start out by understanding the CSLID value you need to overcome. For instance the +properties of Settings > Ethernet > Properties shows a UAC prompt for a COM / CSLID ID. + +Carefully take note of the CSLID ID before proceeding. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_com_cslid_class.webp) + +Then create the policy to overcome the UAC prompt by using New > COM Class Policy. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_com_cslid_class_1.webp) + +You can then use three methods to provide the CSLID number: + +- Add custom COM Class - Typical for installed applications which have a COM function. +- Add well-known COM Class - Typical for operating system functions +- Scan registry for COM Classes - Helpful if you need to locate registered COM items from an example + machine. + +Those choices can be seen here. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_com_cslid_class_2.webp) + +In this example we will **Add well-known COM class**. Be sure to select the exact match or the +function will not work as expected. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_com_cslid_class_3.webp) + +After the policy applies, the COM item will have its UAC prompt overcome. diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/controlpanelapplets.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/controlpanelapplets.md new file mode 100644 index 0000000000..1e4533735d --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/controlpanelapplets.md @@ -0,0 +1,32 @@ +--- +title: "Elevating Control Panel Applets" +description: "Elevating Control Panel Applets" +sidebar_position: 30 +--- + +# Elevating Control Panel Applets + +Endpoint Policy Manager can also be used to elevate situations within Windows itself. Select +**Add** > **New Control Panel Applet Policy** from the drop-down menu. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_control_panel_applets.webp) + +Next, consider a situation in which a Standard User may need access to the Device Manager and the +Disk Defragmenter Control Panel applets. Make two policies (going through the wizard twice). The +first time choose **Device Manager** first, as shown here. Next, select **Run with elevated +privileges** as the action. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_control_panel_applets_1.webp) + +The second time you run through the wizard, choose **Optimize Drives**,. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_control_panel_applets_2.webp) + +The result of having gone through the wizard twice is the two MMC entries shown here. + +![A screenshot of a calendar Description automatically generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_control_panel_applets_3.webp) + +At this point, GPupdate can be run and tested on the endpoint. You should bypass the UAC prompt and +be prompted for Device Manager and the Disk Defragmenter, as shown here. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_control_panel_applets_4.webp) diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/customizedtoken.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/customizedtoken.md similarity index 78% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/customizedtoken.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/customizedtoken.md index 7e9f3155a6..f3f336d387 100644 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/customizedtoken.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/customizedtoken.md @@ -10,10 +10,7 @@ On rare occasions you might need to change some of the attributes of a process blanket Elevate. You may do this via the **Run with customized token** function when creating a rule. -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/rules/run_with_customized_token.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/rules/run_with_customized_token.webp) Here you can change a variety of functions about the token including its permissions, privileges and security, as well as Integrity level. @@ -21,8 +18,8 @@ security, as well as Integrity level. The common use cases for needing to manage a customized token are: - Handling service accounts’ permissions.For more in formation, see the - [Reduce or specify Service Account Rights](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/serviceaccountrights.md) + [Reduce or specify Service Account Rights](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/serviceaccountrights.md) video demonstration. - Drag-and-drop issues between applications. For ore information, see the - [I elevated an application, but drag and drop between the elevated and other non-elevated applications isn't working anymore. What can I try?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsforadminapproval/dragdrop.md) + [I elevated an application, but drag and drop between the elevated and other non-elevated applications isn't working anymore. What can I try?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsforadminapproval/dragdrop.md) topic. diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/deny/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/deny/_category_.json new file mode 100644 index 0000000000..bd1ff481b5 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/deny/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Denying Applications (Standard, UWP, and DLLs)", + "position": 80, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/deny/dlls.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/deny/dlls.md new file mode 100644 index 0000000000..c539b9e1e9 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/deny/dlls.md @@ -0,0 +1,27 @@ +--- +title: "Denying DLLs within Applications" +description: "Denying DLLs within Applications" +sidebar_position: 30 +--- + +# Denying DLLs within Applications + +You can deny DLLs within Applications, like PowerShell’s internal DLLs, which make it operate. + +First you must turn on the option with a Global DLL policy, which may only be enabled on the +**Computer Configuration** side. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/deny/denying_dlls_within_applications.webp) + +Then create a matching rule with **New DLL Policy**. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/deny/denying_dlls_within_applications_1.webp) + +Then you can **Deny execution** of the DLL when it is encountered. + +:::note +Some additional details and examples can be found in the +[How to Defend against malicious PowerShell attacks (DLLs)?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsforadminapproval/maliciousattacks.md) +topic. + +::: diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/deny/overview.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/deny/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/deny/overview.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/deny/overview.md diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/deny/standard.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/deny/standard.md new file mode 100644 index 0000000000..d624dca28a --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/deny/standard.md @@ -0,0 +1,41 @@ +--- +title: "Denying Standard Applications" +description: "Denying Standard Applications" +sidebar_position: 10 +--- + +# Denying Standard Applications + +:::note +For an overview of Endpoint Policy Manager performing Application control see the +[Endpoint Policy Manager Application Control with PP Least Privilege Manager](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/applicationcontrol.md) +video. +::: + + +To do this, first create a rule type which matches your scenario. Then pick the condition to match. +For instance, you could use a **Signature Condition** to select a file from Mozilla Corporation, as +seen here. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/deny/denying_standard_applications.webp) + +Then select the **Action** type **Deny execution**. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/deny/denying_standard_applications_1.webp) + +The MMC will take action to deny the desired user rights. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/deny/denying_standard_applications_2.webp) + +The result is that Firefox and every other application signed by this publisher would not run on the +endpoint no matter how it made it there (even if it was properly installed). The result of a +**Deny** rule can be seen below. + +:::note +You may use Endpoint Policy Manager (formerly PolicyPak) Least Privilege Managerr to +deliver custom messages to users, including links to click on URLs for more information on your +corporate policies. +::: + + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/deny/denying_standard_applications_3.webp) diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/deny/windowsuniversal.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/deny/windowsuniversal.md new file mode 100644 index 0000000000..e29df3f024 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/deny/windowsuniversal.md @@ -0,0 +1,64 @@ +--- +title: "Denying UWP Applications" +description: "Denying UWP Applications" +sidebar_position: 20 +--- + +# Denying UWP Applications + +:::note +For an overview of how to manage UWP applications, see the +[Manage, block and allow Windows Universal (UWP) applications](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/windowsuniversalapplications.md) +video. +::: + + +Endpoint Policy Manager can be used to manage Universal Windows Platform (UWP) applications, +allowing you to block one or more applications. To do this, select **Add** > **New UWP Policy**. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/deny/denying_uwp_applications.webp) + +There are several options for managing UWP apps: + +- You can create a policy for all UWP apps. +- You can create a policy for just Microsoft Store UWP apps. +- You can create a policy for sideloaded or Enterprise apps. + +Here we have chosen the option for **All UWP apps**. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/deny/denying_uwp_applications_1.webp) + +Next, you can deny execution for all of the apps at one time, or allow and log them, as shown here. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/deny/denying_uwp_applications_2.webp) + +If you choose to deny the apps, you must select your desired deny action. In this example, the +default Windows block message will pop up when a user attempts to open any UWP application. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/deny/denying_uwp_applications_3.webp) + +Using the other options for managing apps, you can block all Microsoft Store apps, or all Enterprise +UWP apps at one time in a similar fashion. You can also allow or block specific UWP apps as well. +You might want to create one policy that blocks all UWP apps and then supplement it with other rules +that allow specific UWP apps. You also might want to create rules that only block designated apps. +To choose to block only designated apps, select the **Specific UWP apps** option. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/deny/denying_uwp_applications_4.webp) + +Next, you will need to provide some information about the app, such as the Package Name and +Publisher. You can retrieve this information by either pointing to it using the **Select an +installed app** button, or by running the Get-AppxPackage command in an elevated PowerShell session. +This command will list all of the installed UWP apps on a given machine. Then you can populate the +required information to manage the Microsoft Xbox app has been entered. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/deny/denying_uwp_applications_5.webp) + +Next, finish creating the policy by selecting the block/allow action and further targeting the +policy. + +In general, most people will want to use this option to block all UWP applications while letting +some applications continue to work. This can be done with two stacked rules. In this example, all +UWP applications are denied, but then applications with "Calc" or "Store" in the name, or "Adobe" as +the publisher are allowed to run as shown below. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/deny/denying_uwp_applications_6.webp) diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/executables.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/executables.md new file mode 100644 index 0000000000..1619fc429b --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/executables.md @@ -0,0 +1,128 @@ +--- +title: "Elevating Executables" +description: "Elevating Executables" +sidebar_position: 10 +--- + +# Elevating Executables + +:::note +For an overview of how to elevate applications that need admin rights, see the +[Kill Local Admin Rights (Run applications with Least Privilege)](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/localadminrights.md) +video. +::: + + +In the previous section, we observed that when a Standard User tries to run Process Monitor, they +are not allowed because it requires admin rights. Creating a Endpoint Policy Manager Least Privilege +Manager policy and getting it delivered will remedy this. + +In these examples we’ll be using Group Policy to create the policies and then delivering them. +However, you may also use Endpoint Policy Manager Cloud, and MDM service like Intune, or your own +system like SCCM. + +For these examples, you must link it to where users are and create a new executable policy. As shown +in this example, create a GPO named PPLPM Policies and link it to the East Sales Users +organizational unit (OU). Then in the **User Configuration** > Netwrix Privilege Secure > **Least +Privilege Manager** section, select **Add** > **New Executable Policy**. + +![A computer screen shot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_executables.webp) + +An executable rule can be one of two types: + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_executables_1.webp) + +Simple rules match on a specific piece of criteria, which could include the name or location (Path), +the fingerprint of the file (Hash), the company that digitally signed the file (Signature), or +specific characteristics of a file such as version and inner name (File Info). + +Combo rules enable matching on any or all the mentioned criteria. A popular combination is file name +and publisher. You can make specific rules about the items you want to enable with elevated rights +by using two conditions. + +You’ll then be asked if you want this policy to be related to an action within Netwrix Privilege +Secure. For now, we’ll skip this (leave unchecked) and we’ll return back to it in the +[Endpoint Policy Manager & Netwrix Privilege Secure](/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/privilegesecure/overview.md) +topic. Future examples will purposely omit this step until we need it. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_executables_2.webp) + +In this case, use a Hash condition, which indicates, "Run ProcMon.exe with elevated rights because +of the Hash (fingerprint) of the file." Select **Hash** and click **Next**. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_executables_3.webp) + +Additionally, this is where you set the settings for **Apply to child processes**. For now, leave +as-is. You can learn more about this in ” in the section on“Best Practices and Miscellaneous +Topics.” + +Specify a file (in this example, we'll use the copy of Process Monitor) or a running process (which +is not applicable in this scenario), as shown here.  The hash is populated and you may choose which +Algorithm to use. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_executables_4.webp) + +The next screen, as shown here, demonstrates possible action types and options for Endpoint Policy +Manager Least Privilege Manager. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_executables_5.webp) + +These action types are: + +- **Run with elevated privileges**. This adds the SYSTEM token to the process, elevating it as + needed when a Standard User runs it. +- **Run with customized token**. This is not usually needed but provides granular control of tokens + in processes. +- **ACL Manage file system and registry** You can enable specific files or registry items to be + managed when specific processes are run. +- **Deny execution**. This prevents something from running even if the user is an admin. +- **Allow and log**. This enables an application to run if otherwise prevented. When used in + conjunction with SecureRun™, this can be useful. The next section and example will explore this + in greater detail. + +These Options are: + +- **Apply on demand**. Enables the elevation only when application is right-clicked. For more + information on this, see [Apply on Demand Rules](/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/apply/ondemand.md). +- **Do not generate events**. PolicyPak logs items in the Windows event log. Setting this item + configured (checked) means that events will not be logged when this process is run. +- **Do not elevate Open/Save dialog**. By default Endpoint Policy Manager will prevent child + processes from gaining elevation thru the Open/Save dialogs. See the + [Best Practices and Miscellaneous Topics](/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/overviewmisc.md) topic for additional + information. +- **Show popup message**. Optional requirement to either force the user to reauthenticate and/or put + in Justification text before the process starts. See the + [Best Practices and Miscellaneous Topics](/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/overviewmisc.md) for additional + information. + +The next page provides the opportunity to enhance this policy with these final touches: + +- **Name** +- **Comment** +- **State** (default is enabled) +- **Scope**. See the [Best Practices and Miscellaneous Topics](/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/overviewmisc.md) for + additional information. +- **Item-Level Targeting**. See the + [Best Practices and Miscellaneous Topics](/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/overviewmisc.md) for additional + information. +- **Parent Process filter**. See the + [Best Practices and Miscellaneous Topics](/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/overviewmisc.md) for additional + information. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_executables_6.webp) + +Once you have made your selections, an entry in the Group Policy Management Editor is obtained, as +shown in here. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_executables_7.webp) + +To re-edit the policy, it is not necessary to use the wizard again. Instead, just double-click the +policy entry to view it in a flat list, as shown here. Then click on any of the numbered items to +make any changes. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_executables_8.webp) + +On your endpoint, log on as the user who will obtain the GPO (e.g., EastSalesUser1), or run +GPupdate. Once the GPO applies, Process Monitor will run without a UAC prompt, as demonstrated here. + +![elevating_executables_9](/images/endpointpolicymanager/leastprivilege/elevate/elevating_executables_9.webp) diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/javajarfiles.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/javajarfiles.md similarity index 76% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/javajarfiles.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/javajarfiles.md index bc1f8dcf90..d2b7069437 100644 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/javajarfiles.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/javajarfiles.md @@ -9,7 +9,7 @@ sidebar_position: 50 :::note For an overview on elevating JAR files and also preventing .JAR files from running, which could need admin rights, see the -[Elevate (or smack down) scripts and Java JAR files](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/scripts.md) +[Elevate (or smack down) scripts and Java JAR files](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/scripts.md) video. ::: @@ -21,7 +21,4 @@ flash drives. To start making rules for Java JAR files right-click in the window and select **Add** > **New Java (JAR) Policy**. -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_java_jar_files.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_java_jar_files.webp) diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/msiinstallerfiles.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/msiinstallerfiles.md new file mode 100644 index 0000000000..8ed783bdc7 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/msiinstallerfiles.md @@ -0,0 +1,51 @@ +--- +title: "Elevating MSI Installer Files" +description: "Elevating MSI Installer Files" +sidebar_position: 20 +--- + +# Elevating MSI Installer Files + +Endpoint Policy Manager can be used to elevate MSI applications to allow end users to install them +by themselves. If you followed along in the Quick Start, you previously downloaded Skype for +desktop, which is an MSI file. Attempting to run Skype Setup as a Standard User is blocked, as +previously demonstrated. + +You can enable a Standard User to install the MSI application by selecting **Add** > **New Windows +Installer Policy** from the drop-down menu, as shown here. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_msi_installer_files.webp) + +At this point, a prompt will appear for a Simple rule or a Combo rule. For the Quick Start, we +suggest choosing **Use Simple rule (recommended)** as we have shown previously. Then, on the +Conditions page, options to select **Path**, **Hash**, **Signature**, or **Product Info** are +available. For this Quick Start, we suggest you select **Hash**. + +:::note +We realize that hash values often change for installers, but using Hash is only for the +Quick Start. To learn how to authorize users to keep applications up to do date, learn about Combo +rules in [Best Practices and Miscellaneous Topics](/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/overviewmisc.md). +::: + + +On the next page, click **Select windows installer** and select the SkypeSetup.MSI package +(previously downloaded). + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_msi_installer_files_1.webp) + +You will then see the Hash information automatically entered. Click **Next**. On the Select Action +page, select **Run with elevated privileges** and click **Next**. On the Settings page, enter a name +for the policy and click **Finish**. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_msi_installer_files_2.webp) + +Now you will see an entry in the Endpoint Policy Manager (formerly PolicyPak) Least Privilege +Manager MMC. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_msi_installer_files_3.webp) + +Run GPupdate on the endpoint, and then, as a Standard User, try to run the Skype MSI installer +again. This time the UAC prompt is removed from the Install icon, and the MSI application should +install as expected. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_msi_installer_files.webp) diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/overview.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/overview.md new file mode 100644 index 0000000000..a91b97886c --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/overview.md @@ -0,0 +1,121 @@ +--- +title: "Rules" +description: "Rules" +sidebar_position: 10 +--- + +# Rules + +Endpoint Policy ManagerLeast Privilege Manager is located within the Netwrix Privilege Secure node. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/rules/rules_1.webp) + +:::note +You will only see all components of Endpoint Policy Manager if you download the Endpoint +Policy Manager Admin Console from Portal.endpointpolicymanager.com, but not if you are using only the Netwrix +Privilege Secure console. +::: + + +Endpoint Policy ManagerLeast Privilege Manager is within the Netwrix Privilege Secure node and not +within the Netwrix Endpoint Policy Manager (formerly PolicyPak) node to demonstrate the relationship +between Endpoint Policy Manager and Netwrix Privilege Secure. That is, you can use all of Endpoint +Policy Manager (all Endpoint Policy Manager components) or you may wish to use Endpoint Policy +Manager alongside Netwrix Privilege Secure. For more information, see the +[Endpoint Policy Manager & Netwrix Privilege Secure](/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/privilegesecure/overview.md) +topic. + +Endpoint Policy Manager MMC snap-in enables you to create new Endpoint Policy Manager Least +Privilege Manager policies or collections. + +Collections are groupings of policies, and policies are the rules that perform the work. You can +create collections, and policies within collections, on the User side, the Computer side, or both. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/rules/rules_2.webp) + +Endpoint Policy ManagerLeast Privilege Manager can elevate (or block) the following: + +- Executable policies +- Control Panel applets +- Windows installers (MSIs) +- Scripts (BAT, CMD, PS1, JS, JSE, VBS, VBE) +- Java JAR (archive) files +- UWP applications +- COM Class Policies +- ActiveX Policies + +To test some of these scenarios, we recommend that you download some applications on your Windows +endpoint to follow along. Perform these downloads as a Standard User, such as EastSalesUser1, but +notas a local admin. + +For example, as EastSalesUser1, download an application that, when run by a Standard User, requires +UAC prompts. To view a UAC prompt on the Microsoft side as an example, try to +[download](https://docs.microsoft.com/en-us/sysinternals/downloads/procmon) the Microsoft Process +Monitor application. + +Running the Process Monitor application as a Standard User, such as EastSalesUser1, is not +permitted. The application requires local admin rights, resulting in a prompt for UAC. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/rules/rules_3.webp) + +To participate in the Quick Start exercises, [download](http://go.skype.com/msi-download) Skype MSI +for Windows via their website. + +:::warning +You may get a warning when downloading in Edge, but it is perfectly safe. +::: + + +When a Standard User attempts to install Skype MSI installer, they are not allowed. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/rules/rules_4.webp) + +The final example is downloading a portable app. A portable app is an application that can be +downloaded anytime by a user. Sometimes it requires no installation; other times, it must be +unpacked before you can run it. Here are a few examples of these apps: + +- [VLC Media Player Portable](https://portableapps.com/apps/music_video/vlc_portable) +- [Sudoku Portable](https://portableapps.com/apps/games/sudoku_portable) +- [Notepad2 Portable](https://portableapps.com/apps/development/notepad2_portable)[https://portableapps.com/apps/games/sudoku_portable](https://portableapps.com/apps/games/sudoku_portable) + +In this example, Notepad2 has been downloaded and unpacked to the user’s desktop in a folder called +Notepad2. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/rules/rules_5.webp) + +The Standard User can now open the folder and immediately run the EXE file and use the app. Despite +the fact that this application could be a virus or crypto-malware, the user with standard rights can +still run it. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/rules/rules_6.webp) + +In the Quick Start examples with Endpoint Policy Manager Least Privilege Manager, the goals are as +follows: + +- Allow Standard Users to run Process Monitor elevated but maintain Standard User rights everywhere + else. +- Allow Standard Users to install Skype Setup MSI elevated but maintain Standard User rights + everywhere else. +- Prevent the system from running unknown software, such as Notepad2, if it was not installed by the + original admin until it is determined to be safe. +- Allow Notepad2 to run normally once its safety has been determined. +- Prevent users from downloading all other unknown applications. + +The examples we will look at are: + +- Applications on the endpoint that are properly installed by the admin (leftmost column of + applications in this example). +- Applications that require elevation to run (Procmon in this example). +- Applications that are downloaded by the user, which may be unknown or harmful (Notepad2 in this + example). + +![A computer screen shot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/rules/rules_7.webp) + +For these examples, keep copies of Process Monitor and NotePad2 Portable handy to serve as a +reference from your management station. These are not installed apps; you will be attempting to run +them before and during the Quick Start to see how they are affected by PolicyPak Least Privilege +Manager. + +When you download these applications, it is ideal to store them in two places. The first copy should +be sitting on your endpoint. The second copy should be sitting on your Group Policy management +station, as these will also be required to help create the rules for these examples. diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/scripts.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/scripts.md similarity index 84% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/scripts.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/scripts.md index b5f5c6987e..bd077cad12 100644 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/scripts.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/scripts.md @@ -9,7 +9,7 @@ sidebar_position: 40 :::note For an overview on elevating scripts and preventing scripts from running, which could need admin rights, see the -[Elevate (or smack down) scripts and Java JAR files](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/scripts.md) +[Elevate (or smack down) scripts and Java JAR files](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/scripts.md) video. ::: @@ -22,10 +22,7 @@ running. Kick off the process to create a policy for scripts by going to **Add** > **New Script Policy**. -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_scripts.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_scripts.webp) The script types that are supported for elevation and for blocking are: diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/securerun/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/securerun/_category_.json new file mode 100644 index 0000000000..29b418ee79 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/securerun/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Quick Start - Using SecureRun™ to Block Threats and Unknown Software", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/securerun/avoiduac.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/securerun/avoiduac.md new file mode 100644 index 0000000000..5ac499d292 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/securerun/avoiduac.md @@ -0,0 +1,32 @@ +--- +title: "Creating Rules to Avoid UAC Prompts and Other Dialogs" +description: "Creating Rules to Avoid UAC Prompts and Other Dialogs" +sidebar_position: 20 +--- + +# Creating Rules to Avoid UAC Prompts and Other Dialogs + +Over time, once SecureRun is on, you will likely still get some application attempting to update in +the background, which will cause a pop-up explaining a blocking attempt. + +Once you have learned which programs are causing the pop-ups, you can decide to create an Allow and +Log rule, an Elevate rule, or a Deny rule. The rule type you choose depends on the application and +what you’re trying to do. + +When SecureRun is turned on, the typical action needed is Allow and Log through a command line rule. +For instance, to allow Java to attempt to keep updating, you would set a Path Condition and set a +rule to Allow and Log a command line. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/securerun/creating_rules_to_avoid_uac.webp) + +The example below show a Combo rule enabling OneDriveSetup.exe to keep running (**Path Condition** +and **Command-line Condition**) with the Allow and Log action. + +For more information on Combo rules, see +[Creating and Using Executable Combo Rules](/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/bestpractices/executablecombo.md) + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/securerun/creating_rules_to_avoid_uac.webp) + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/securerun/creating_rules_to_avoid_uac_1.webp) + +After the rules are created, you should not see pop-ups from installers with rules in place. diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/securerun/inlinecommands.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/securerun/inlinecommands.md new file mode 100644 index 0000000000..012a5d9865 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/securerun/inlinecommands.md @@ -0,0 +1,27 @@ +--- +title: "SecureRun and Inline Commands" +description: "SecureRun and Inline Commands" +sidebar_position: 10 +--- + +# SecureRun and Inline Commands + +By default PolicyPak SecureRun will also block “inline commands.” + +For example, one can run something like this from the Run dialog (or in many other ways.) + +``` +cmd /c "mkdir C:\TEST & copy c:\Windows\notepad.exe C:\TEST" +``` + +![A screenshot of a computer error Description automatically generated](/images/endpointpolicymanager/leastprivilege/securerun/securerun_and_inline_commands.webp) + +Normally, users don’t do this. But it could be valid during an application installation or program +setup. You can see an example of this used in the Microsoft +[Latest Astaroth living-off-the-land attacks are even more invisible but not less observable](https://www.microsoft.com/en-us/security/blog/2020/03/23/latest-astaroth-living-off-the-land-attacks-are-even-more-invisible-but-not-less-observable/) +article. + +SecureRun will automatically try to block such attempts. For more information on how to deal wit +this issue, please see +[Why does Endpoint Policy Manager SecureRun block "inline commands" and what can I do to overcome or revert the behavior ?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/troubleshooting/inlinecommands.md) +for guidance and details. diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/securerun/overview.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/securerun/overview.md new file mode 100644 index 0000000000..c08ebbe63d --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/securerun/overview.md @@ -0,0 +1,136 @@ +--- +title: "Quick Start - Using SecureRun™ to Block Threats and Unknown Software" +description: "Quick Start - Using SecureRun™ to Block Threats and Unknown Software" +sidebar_position: 20 +--- + +# Quick Start - Using SecureRun™ to Block Threats and Unknown Software + +:::note +For an overview of how to block threats and unknown software like malware and similar +applicates, see the +[Using Least Privilege Manager's SecureRun Feature](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/feature.md) +video. +::: + + +In the previous section, we established that users with Standard rights and admin rights can end up +downloading both safe portable applications or unsafe malware applications. In addition, both Admins +and Standard Users can download MSI applications, even if they wish to install them later. To avoid +having unsafe applications being downloaded and used, Endpoint Policy Manager can ensure that +applications that were not properly installed by the admin, or in-house software deployment tool +will not run without the admin's approval. In this Quick Start example, all unknown applications and +MSI applications will be blocked, while one specific application will be allowed to run (with +standard, not elevated, rights). + +## Understanding SecureRun + +Endpoint Policy ManagerLeast Privilege Manager can block all items that are not properly installed +by the admin with the Endpoint Policy Manager SecureRun™ policy. To see how this works, let's first +create a new SecureRun™ policy in the GPO. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/securerun/quick_start_using_securerun.webp) + +This will result in a new SecureRun™ policy editor, as displayed here. To turn on SecureRun click +**Enable** and then, if desired, , change the messaging from Default to Customized (or Silently.) + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/securerun/quick_start_using_securerun_1.webp) + +In the SecureRun™ Members list, you can review who and what has been added, including the defaults +members: + +- Local computer administrator +- NT SERVICE\TrustedInstaller +- NT AUTHORITY\SYSTEM +- BUILTIN\Administrators + +The members on this list are the people and system processes that usually install software. For that +reason, no regular users or groups are listed here because they do not normally install software. + +:::note +Add system processes or accounts to the SecureRun Members list that properly install +software, such as Microsoft Endpoint Manager (SCCM and Intune), etc., to enable the software to +deliver applications without being prevented. +::: + + +When SecureRun™ is on, Endpoint Policy ManagerLeast Privilege Manager checks to see who owns the +file executable, MSI file, script, or Java JAR file. When users download files off the Internet or +copy them from a USB flash drive, they own the file, and since they aren't on the SecureRun™ +Members list, Endpoint Policy Manager Least Privilege Manager will block all applications that they +have installed. + +In the SecureRun™ policy editor, click **Ok**. You can then see that the SecureRun™ policy is +enabled and is checking for file ownership (aka “Trusted”), as shown here. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/securerun/quick_start_using_securerun_2.webp) + +At the endpoint, run GPupdate or log on as a user who will receive the policy. The result is that +all unknown applications are blocked (like previously downloaded Notepad2), and all properly +installed applications are allowed. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/securerun/quick_start_using_securerun_3.webp) + +Additionally, MSI files that attempt to launch are also subjected to Endpoint Policy Manager +SecureRun™. If an application already has an Allow rule in place (similar to what we saw earlier +when we enabled SkypeSetup.MSI to run via a Hash rule), then it will continue to launch. But MSI +installers that don't have an Allow rule in place will be prevented from running, as show here. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/securerun/quick_start_using_securerun_4.webp) + +This works because Endpoint Policy Manager Least Privilege Manager is enforcing the SecureRun™ +Members list. If we look at who owns the file for the properly installed application, we can see the +owner is SYSTEM. If we look at who owns the file for the unknown application downloaded from the +Internet, we can see the owner is EastSalesUser1. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/securerun/quick_start_using_securerun_5.webp) + +If you review the list of users allowed to run applications, you will notice that EastSalesUser1 is +not on the list and, therefore, is not permitted to run Untrusted applications. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/securerun/quick_start_using_securerun_6.webp) + +If you decide you want to enable an application, such as Notepad2, to run, create a new Executable +rule (Path, Hash, Signature, or File) as shown in the previous section. This time, select **Allow +and log**. This will run the application with Standard User rights. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/securerun/quick_start_using_securerun_7.webp) + +The result can be seen in the MMC list view. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/securerun/quick_start_using_securerun_8.webp) + +As a test, run GPupdate on the endpoint, and then run Notepad2, which will run with Standard User +rights and bypass SecureRun™ as seen here. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/securerun/quick_start_using_securerun_9.webp) + +To recap, Endpoint Policy ManagerLeast Privilege Manager SecureRun™ operates under the following +criteria: + +- The Endpoint Policy Manager Least Privilege Manager SecureRun™ policy checks every executable and + MSI that the user attempts to run. +- If the user isn’t on the SecureRun™ Members list, they are not permitted to run it. +- Only executable applications, scripts, Java JAR files, and MSI files that have file owners on the + SecureRun™ Members list are allowed to run. +- If an application (or other type) has an **Allow and Log** rule enabling its use, it is permitted. + +The result is that Endpoint Policy Manager SecureRun™ blocks any executable or MSI that the user +downloads and tries to run but continues to let properly installed applications run. + +:::note +An additional way to use Endpoint Policy Manager SecureRum™ is to also trap for anything +that is unsigned. See the +[Least Privilege Manager: Block All Unsigned with SecureRun](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/preventunsigned.md) +video for a demonstration. +::: + + +:::note +Remember, all Endpoint Policy Manager Least Privilege Manager rules, including SecureRun, +may be used with an MDM service, or your own management system like PDQ deploy For more information +on this topic, please see the +[Blocking Malware with Endpoint Policy Manager and PDQ Deploy](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/methods/pdqdeployblockmalware.md) +video demonstration. + +::: diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/uacprompts/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/uacprompts/_category_.json new file mode 100644 index 0000000000..e53d334708 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/uacprompts/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Overcoming Common UAC Prompts with Helper Tools", + "position": 60, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "uacprompts" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/uacprompts/admx.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/uacprompts/admx.md similarity index 76% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/uacprompts/admx.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/uacprompts/admx.md index 5111c0d7a1..e1acc2328f 100644 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/uacprompts/admx.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/uacprompts/admx.md @@ -12,10 +12,7 @@ Manager Helper Tools via the included ADMX files: - Use it to trim what the user sees in the Printer tool. - Use it to trim what the user sees in the Remove Programs too seen here. -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/tool/helper/using_the_endpointpolicymanager_least.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/tool/helper/using_the_endpointpolicymanager_least.webp) ## ADMX Settings with the Printer Tool @@ -30,10 +27,7 @@ By default, the Remove Programs tool (once elevated) will enable a user to remov installed on the computer, except for the Endpoint Policy Manager client-side extension or other Netwrix or Endpoint Policy Manager-signed installed applications or components. -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/tool/helper/using_the_endpointpolicymanager_least_1.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/tool/helper/using_the_endpointpolicymanager_least_1.webp) However, using the Endpoint Policy Manager Least Privilege Manager ADMX settings you can hide or reveal which applications are available for users to uninstall. This is possible by using one the @@ -59,24 +53,15 @@ names to include or exclude from the Endpoint Policy Manager: Programs Manager t are shown here. Specify a value name of "\*oracle\*" and a value of 1. This will pick up publishers named Oracle and Oracle Corporation. -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/tool/helper/using_the_endpointpolicymanager_least_1.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/tool/helper/using_the_endpointpolicymanager_least_1.webp) Next, using the same tool, you specify a value name of "\*Java\*" as the program name and a value of 1. Since we also want to hide programs with 171 in the name, you’ll need to specify a value name of \*171\* with a value of 0 to specifically hide programs with this value in the name. -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/tool/helper/using_the_endpointpolicymanager_least_2.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/tool/helper/using_the_endpointpolicymanager_least_2.webp) The result of these settings can be seen here, where only a limited number of programs are available for removal. -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/tool/helper/using_the_endpointpolicymanager_least_2.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/tool/helper/using_the_endpointpolicymanager_least_2.webp) diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/uacprompts/elevate.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/uacprompts/elevate.md similarity index 76% rename from docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/uacprompts/elevate.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/uacprompts/elevate.md index e4c2c8c76c..179bedf582 100644 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/uacprompts/elevate.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/uacprompts/elevate.md @@ -13,24 +13,18 @@ tool) is shown here; the other tools will have the same result. :::note See the -[Endpoint Policy Manager Least Priv Manager Tools Setup](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/helperstoolsandtips/toolssetup.md) +[Endpoint Policy Manager Least Priv Manager Tools Setup](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/helperstoolsandtips/toolssetup.md) video for an overview how to set up elevation for the Least Privilege Manager Helper Tools. ::: -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/tool/helper/elevating_least_privilege.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/tool/helper/elevating_least_privilege.webp) In order to elevate the Endpoint Policy Manager Least Privilege Manager Helper Tools so that they will function correctly on your endpoints, you can use our preconfigured rules, which are part of the guidance on the Endpoint Policy Manager Portal. -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/tool/helper/elevating_least_privilege.webp) +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/tool/helper/elevating_least_privilege.webp) After that, when the client is updated to acquire the new rules, the Endpoint Policy Manager Least Privilege Manager Helper Tools will run as expected. @@ -38,7 +32,7 @@ Privilege Manager Helper Tools will run as expected. :::note For more information on how to get the Helper Tools as shortcuts to Desktops and other locations, please see -the[Getting the helper tools as desktop shortcuts](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/helperstoolsandtips/helperdesktopshortcut.md) +the[Getting the helper tools as desktop shortcuts](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/helperstoolsandtips/helperdesktopshortcut.md) video. ::: diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/uacprompts/uacprompts.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/uacprompts/uacprompts.md new file mode 100644 index 0000000000..7afcc41a26 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/uacprompts/uacprompts.md @@ -0,0 +1,47 @@ +--- +title: "Overcoming Common UAC Prompts with Helper Tools" +description: "Overcoming Common UAC Prompts with Helper Tools" +sidebar_position: 60 +--- + +# Overcoming Common UAC Prompts with Helper Tools + +:::note +See the +[Overcome Network Card, Printer, and Remove Programs UAC prompts](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/helperstoolsandtips/uacprompts.md) +video for an overview of using Endpoint Policy Manager Least Privilege Manager Helper Tools in +action. +::: + + +Three common areas where users need to overcome admin prompts are: + +- Network adapters +- Printers +- Software removal + +Let’s examine how Endpoint Policy Manager Least Privilege Manager’s helper tools can help overcome +these three challenges. + +If Standard Users try to manage their own Network settings, they can take a few steps, but they’re +quickly going to encounter a UAC prompt, as seen here. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/tool/helper/overcoming_common_uac_prompts.webp) + +:::note +We used COM / CSLID rules earlier to overcome this concern, but this section and solution +gives you another option. +::: + + +Similarly, if a Standard User attempts to add a printer, they will receive another UAC prompt, shown +here. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/tool/helper/overcoming_common_uac_prompts.webp) + +Finally, if Standard Users try to manage their own Apps and Features by uninstalling an application +that they no longer need, they will also be prevented by a UAC prompt, seen here. + +![A screenshot of a computer Description automatically generated](/images/endpointpolicymanager/leastprivilege/tool/helper/overcoming_common_uac_prompts_1.webp) + +After setting up Endpoint Policy Manager’s Helper Tools, you can overcome all three of these issues. diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/overview.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/overview.md new file mode 100644 index 0000000000..3adf3110ae --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/overview.md @@ -0,0 +1,20 @@ +--- +title: "Endpoint Privilege Manager (formerly Least Privilege Manager)" +description: "Endpoint Privilege Manager enables zero-trust privilege management" +sidebar_position: 1 +--- + +# Endpoint Privilege Manager + +Endpoint Privilege Manager (formerly Least Privilege Manager) enables you to get out of the risky business of giving users local admin rights while allowing non-admins to safely install software they need, on-demand. + +## Quick Links + +### 📖 [Manual](./manual/) +Complete documentation for using Endpoint Privilege Manager: +- **Windows** - Windows-based privilege management +- **macOS** - macOS client configuration and management + +### 🔧 [Tech Notes](./technotes/) +Implementation guides and technical documentation: +- **Implementation QuickStart Guide** - Step-by-step setup procedures \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/technotes/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/technotes/_category_.json new file mode 100644 index 0000000000..24bc43ccdd --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/technotes/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Tech Notes", + "position": 2, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/technotes/implementationguide.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/technotes/implementationguide.md new file mode 100644 index 0000000000..8cedde891d --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/technotes/implementationguide.md @@ -0,0 +1,457 @@ +--- +title: "Endpoint Privilege Manager Implementation QuickStart Guide" +description: "Endpoint Privilege Manager Implementation QuickStart Guide" +sidebar_position: 20 +--- + +# Endpoint Privilege Manager Implementation QuickStart Guide + +Netwrix Endpoint Policy Manager (formerly PolicyPak) Least Privilege Manager can help you remove +your local admin rights across your environment. And the tool has a lot to offer. In this Endpoint +Policy Manager Least Privilege Manager Implementation Quickstart guide we will give you a basic +action plan to get started, learn what applications and concerns you need to overcome, then generate +rules to overcome those concerns. + +You can use this guide if you’re planning to use Endpoint Policy Manager with On-Prem Active +Directory and GPOs (Group Policy Objects), an MDM service like Intune or with Endpoint Policy +Manager Cloud. + +:::note +Some customers will be starting from a point where many/most end-users are still running +with Local Admin Rights. But others customers have already removed Local Admin Rights and working to +overcome that scenario. This guide will work for either customer type. +::: + + +:::tip +Remember, as the phrase goes, “Rome wasn’t built in a day.” Your Endpoint Policy Manager Least +Privilege Manager project is expected to take a little bit of time to gather details, and be +implemented in a steady manner that everyone can live with, both end-users and the IT team. +::: + + +## Installing Endpoint Policy Manager MMC and Endpoint Policy Manager CSE + +Getting Endpoint Policy Manager up and going is done quickly. + +The Endpoint Policy Manager Portal is where you download Endpoint Policy Manager Bits and keys used +for when using Endpoint Policy Manager with On-Prem or MDM. You’ll even use the Endpoint Policy +Manager Portal a little for Endpoint Policy Manager Cloud because you’ll need those downloads to +make your perfect Endpoint Policy Manager Cloud test lab (explained later.) That URL is +Portal.endpointpolicymanager.com. + +:::note +Endpoint Policy Manager Cloud has its own URL, which is Cloud.endpointpolicymanager.com, and is +considered the Endpoint Policy Manager Cloud Service. Please see the +[Installation Quick Start](/docs/endpointpolicymanager/gettingstarted/overviewinstall/overviewinstall.md) for an overview of what +is in the download, how to download, unpack, and get organized and quick licensed. +::: + + +Here’s the Endpoint Policy Manager QuickStart Guide with specific steps and ideas for Endpoint +Policy Manager with On-Prem Active Directory and GPOs, an MDM service like Intune or with Endpoint +Policy Manager Cloud: +[Netwrix Endpoint Policy Manager Quick Start](/docs/endpointpolicymanager/gettingstarted/quickstart/overview.md) + +When done you will have the Endpoint Policy Manager MMC Console installed, your endpoints prepared +and be ready to go. + +![poc1](/images/endpointpolicymanager/leastprivilege/poc1.webp) + +:::note +If you’re confused about which method you want to use to get Endpoint Policy Manager +policies deployed (GPO, MDM or Cloud) this video can help you make an informed decision: +[Endpoint Policy ManagerSolution Methods: Group Policy, MDM, UEM Tools, and Endpoint Policy Manager Cloud compared.](/docs/endpointpolicymanager/gettingstarted/misc/videos/gettingstartedmisc/solutionmethods.md) +::: + + +## Licensing some trial machines (or many machines) for Endpoint Privilege Manager and other Endpoint Policy Manager Components + +The Endpoint Policy Manager CSE on the endpoint only works when it is licensed. It is automatically +licensed when a license from Endpoint Policy Manager Cloud is issued. However, if you are using +Active Directory&GPOs or an MDM service like Intune, you will need to enable Endpoint Policy Manager +licensing on those machines. + +It’s easy to put one or a few machines into Trial mode with Endpoint Policy Manager without a +license. For more information on this, please see these steps: +[What is the fastest way to get started in an Endpoint Policy Manager trial, without running the License Request Tool?](/docs/endpointpolicymanager/licensing/knowledgebase/requestingall/trial.md) + +If you need to request a license, please follow the steps outlined in this video: +[How to Request Licenses fromPolicyPak by Creating a "License Request Key"](https://helpcenter.netwrix.com/bundle/endpointpolicymanager/page/Content/endpointpolicymanager/Video/License/LicenseRequestKey.html) + +If you have a trial or full license for Endpoint Policy Manager and you wish to deploy it to all +your computers, please follow these steps: +[How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/licensing/videolearningcenter/installall/installuniversal.md) + +## (Optional, Recommended) Endpoint Policy Manager Cloud or Endpoint Policy Manager via MDM Test Lab Creation + +Working within Endpoint Policy Manager Cloud itself, you can generally create nearly all the policy +types you will need with the in-cloud editors. However, there will always be some policy-creation +areas that are only accessible using the MMC. + +As such we recommend that if you’re using Endpoint Policy Manager Cloud, that you create a +small-scale on-prem test lab. This will accelerate your rule creation because you won’t need to +create a rule and test in the cloud and then sync each time, which could be slower than creating +them first in a small-scale on-prem test lab and then uploading those policies to Endpoint Policy +Manager Cloud. + +Additionally, since there is no way to create policies for Endpoint Policy Manager within an MDM +service like Intune, having a small-scale on-prem test lab is required. + +For a video review on how to get organized and create a small-scale on-prem test lab to use in +conjunction with Endpoint Policy Manager Cloud or Endpoint Policy Manager alongside an MDM service +like Intune, see: +[Endpoint Policy Manager Cloud: What you need to get Started](/docs/endpointpolicymanager/deliverymethods/cloud/videos/testlabbestpractices/start.md) + +## (Optional, Recommended) Endpoint Policy Manager with an MDM service like Intune “Walk before you run.” + +If you’re using Endpoint Policy Manager with an MDM service like Intune, you will also need some +kind of management station and to pre-test your MDM license before you get going. + +The best place to start for these instructions is here: +[Video Learning Center](/docs/endpointpolicymanager/deliverymethods/mdm/videos/videolearningcenter.md) + +Additionally, get to know the details of how to create Endpoint Policy Manager Least Privilege +Manager XMLs, export them, and wrap them up into MSIs for deployment with any MDM service with this +video: [Using Least Privilege Manager with your MDM service](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/methods/mdm.md) + +## Endpoint Privilege Manager “Base Hits” / “Walk Before You Run” + +You’ll want to make sure Endpoint Policy Manager, and specifically Endpoint Policy ManagerLeast +Privilege Manager is licensed, working, and accepting rules. To verify that Endpoint Policy Manager +Least Privilege Manager is licensed and accepting rules, watch the video below and perform a +Endpoint Policy Manager Least Privilege Manager Control Panel Rule for “Device Manager.” Again, you +don’t need to perform the other steps in this video, you just want to verify that Device Manager can +be overcome when Endpoint Policy ManagerLeast Privilege Manager is engaged. Remember to test this +step as a proposed end-user who is running as a Standard User and doesn’t have Local Admin Rights. + +Video: [Kill Local Admin Rights (Run applications with Least Privilege)](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/localadminrights.md) + +## Setting up Common Scenarios Most Customers need right away + +If you are already running without Local Admin Rights, the top requests we get are to enable +customers to perform: + +- Printer installations +- Network Card Changes (DHCP vs. Static). +- Removing Installed Programs + +As such we have some Helper Tools for these specific scenarios and pre-configured guidance to get +them set up. + +![poc2](/images/endpointpolicymanager/leastprivilege/poc2.webp) + +For an overview, please see +[Overcome Network Card, Printer, and Remove Programs UAC prompts](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/helperstoolsandtips/uacprompts.md) +and watch all videos in that section. + +And because there’s an additional way to change Network Card Settings, you’ll want to also add an +extra rule which you can learn how to do here: [COM Support](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/comsupport.md) + +## (Optional, Recommended): Creating an “example machine” with applications you know you need to overcome and (Part 3B) using Endpoint Policy Manager recommended rules + +Of course, you have many machines out in the field where you want to remove local admin rights and +use rules to replace them. However, if you also have the applications, you already know you need +rules for, it is best to try these out in a test lab instead of relying on end-user machines and +auditing events (explained later.) + +So, on a test machineyou control, we recommend installing all the software you’d like to elevate and +work around UAC prompts. Install the Endpoint Policy Manager Client Side Extension on this machine. +Because Endpoint Policy Manager Least Privilege Manager doesn’t have any rules yet, the end-user +software won’t work as expected and should present UAC prompts. + +For more in formation on Endpoint Policy Manager Least Privilege Manager Pre-Configured rules, and +to to see how many you can use right away, without having to generate your own rules, please see +[Installing applications-and-Preconfigured-Rules](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/installapplications.md) + +![poc3](/images/endpointpolicymanager/leastprivilege/poc3.webp) + +For the remaining applications where Endpoint Policy Manager Least Privilege Manager doesn’t have +pre-configured rules, you’ll have to create your own rules. + +You need to get familiar with the Best Practices, so you don’t “over permission” your applications. +Therefore, as you go to create rules for your remaining applications on your test machine, please be +familiar with the following video content: + +- [Best Practices for Elevating User-Based Installs](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/elevatinguserbasedinstalls.md) +- [Security and Child Processes](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/securitychildprocesses.md) +- [Increase security by reducing rights on Open/Save dialogs](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/opensavedialogs.md) +- [Endpoint Privilege Manager and Wildcards](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/wildcards.md) + +The more rules you can create to overcome your UAC prompts in these test machined, the easier it +will be down the line, so users are only left with the UAC prompts you didn’t know about. + +## (Optional): Integration with Netwrix Privilege Secure + +If you are already a Netwrix Privilege Secure customer, you might want to also tie in Endpoint +Policy Manager to Netwrix Privilege Secure. If you wish to perform these steps, please refer to this +video: +[Netwrix Privilege Secure and the NPS/Endpoint Policy Manager Client](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/netwrixprivilegesecure/privilegesecureclient.md) + +## Turn on Global Auditing & Discovery to generate Interesting Events + +Now that you’ve got severalrules created, you should be down to only the items you don’t know about +on endpoint machines. You can turn on Auditing & Discovery to generate interesting events when users +run (or attempt to run) many applications with Local Admin Rights. The two items you should turn on +for starters are below. + +![poc4](/images/endpointpolicymanager/leastprivilege/poc4.webp) + +The way you do this is a little different from Group Policy vs. Endpoint Policy Manager Cloud. We +recommend getting familiar with Eventing in general, and then turning on Discovery. Additionally, +you can Auto-Create Policy from Global Audit Events once you’ve learned which applications require +elevation. For more information on this issue, please see: +[Events](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/eventing/events.md) + +Resulting events on endpoints look similar to an item like this: + +![poc5](/images/endpointpolicymanager/leastprivilege/poc5.webp) + +List of Endpoint Policy Manager Event Categories and IDs: + +- 6200 AUDIT - Process runs elevated. This event will show if the user has local admin rights +- 6205 AUDIT - Process requires elevation. This event will show if the User is a STANDARD USER (UAC + Prompt) +- 6206 A COM object requires elevation - This event will show if the User is a STANDARD USER (UAC + Prompt) +- 6207 An ActiveX installer requires elevation - This event will show if the User is a STANDARD USER + (UAC Prompt) + +## (Optional, Recommended): Capture and Forward Events from Endpoints + +If you are using Endpoint Policy Manager Cloud, this is enabled automatically for you. However, you +need to turn it on for each Cloud group. For more information on this issue, please see: +[Endpoint Policy Manager Cloud + PPLPM + Events: Collect Events in the Cloud](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/eventing/cloudevents.md) + +:::note +Endpoint Policy Manager Cloud Trailers and Customers get 24-hours of rolling logs stored. +You can talk with Endpoint Policy Manager Sales about how to increase the number of days stored in +Endpoint Policy Manager Cloud. +::: + + +If you are already a Netwrix Auditor Customer, you can forward interesting Endpoint Policy Manager +Least Privilege Manager events from endpoint computers to Netwrix Auditor so you can take action. +This is recommended if you already own Netwrix Auditor For more information on this, please see: +[How to use Netwrix Auditor to Report on Endpoint Policy Manager events](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/eventing/reports.md). + +An example of the kind of data you get back can be seen here. + +![poc12](/images/endpointpolicymanager/leastprivilege/poc12.webp) + +You may also use the in-box Windows Event System to forward interesting Endpoint Policy Manager +Least Privilege Manager events from endpoint computers to a central source. The steps to do this are +found here: +[How to forward interesting events for Least Privilege Manager (or anything else) to a centralized location using Windows Event Forwarding.](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/eventing/windowseventforwarding.md) + +You may also use Azure Log Analytics if you wish to store interesting Endpoint Policy Manager Least +Privilege Manager events from endpoints in Azure. For more information on this issue, please see: +[Windows 10 (and Server) Event Logs to Azure Log Analytics Walkthru](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/eventlogs.md). + +## Removing End-Users’ Local Admin Rights (if they still have them) + +At this point, this guide has provided advice if you have already removed local admin rights and if +your users are still running with Local Admin Rights. However, we often get the question of how to +perform this as a bulk task to remove Local Admin Rights from end-users. + +For information on how to perform this, please see +[Use Group Policy to remove local admin rights (then Endpoint Policy Manager to enable Least Privilege)](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/removelocaladmin.md). +While you can remove end-users local admin rights all at once, we recommend you proceed gradually. +This will avoid potential issues with an increase in requests for help as users may need access in +some situations. + +## Generating Rules from Auditing Events + +Once you have events generating on endpoints and you have access to those events (directly or via +Event Forwarding, Netwrix Auditor, or another source), you can auto-create rules from those events. + +![poc10](/images/endpointpolicymanager/leastprivilege/poc10.webp) + +For details on how to do this on-prem, please see +[Auto-Create Policy from Global Audit event](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/eventing/globalauditevent.md)[Auto-Create Policy from Global Audit event](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/eventing/globalauditevent.md) + +For details on how to do it with Endpoint Policy Manager Cloud, please see +[Endpoint Policy Manager Cloud + PPLPM + Events: Collect Events in the Cloud](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/eventing/cloudevents.md). +Note there is a new (not shown in the video) Generate Rule(s) button in Endpoint Policy Manager +Cloud. + +![poc11](/images/endpointpolicymanager/leastprivilege/poc11.webp) + +## Turn on Admin Approval + +You’ve already created the rules for the applications you know, and turned on Discovery Auditing for +the applications you don’t know. However, you can also enable end users to be proactive and request +one-time workarounds for UAC prompts without an automatic rule in place. + +![poc6](/images/endpointpolicymanager/leastprivilege/poc6.webp) + +For more in formation on the Endpoint Policy Manager Admin Approval feature, please see +[Admin Approval demo](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/demo.md) (all the videos in that +section). + +The goal is to minimize the times when users need one-off approval where you can implement automatic +rules from the details you gather. + +## Set up Company Branding + +Admin Approval and other Endpoint Policy Manager Least Privilege Manager dialogs that appear to +users can be branded with your company logo, colors, and text messages. + +![poc7](/images/endpointpolicymanager/leastprivilege/poc7.webp) + +For more information on branding, please see +[Branding the UI and Dialogs](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/branding.md). + +## (Optional): Turn on Self Elevate + +Use Endpoint Policy Manager Least Privilege Manager Self Elevate mode to overcome UAC prompts +without requiring specific rules. This is useful if you want to take away local admin rights, but +still give users the ability to "break the glass" if they have an emergency. + +![poc9](/images/endpointpolicymanager/leastprivilege/poc9.webp) + +This technique isn't generally recommended due to a potential lowering of your security posture, but +it can be especially useful in the right circumstances. + +For more information see:: + +- [Self Elevate Mode](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/demo.md) +- [Endpoint Privilege: Re-Authenticate with Self Elevate](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/reauthenticate.md) + +## (Optional) Turning on Endpoint Policy Manager SecureRun(TM) + +Endpoint Policy Manager Least Privilege Manager has built-in ransomware protection, blocking the +user from downloading, and then running applications you didn’t sanction. When SecureRun™ is on, +Endpoint Policy Manager Least Privilege Manager checks to see who owns the file executable, MSI +file, script, or Java JAR file. When users download files off the Internet or copy them from a USB +flash drive, they own the file, and since they aren't on the SecureRun™ Members list, Endpoint +Policy Manager Least Privilege Manager will block all applications that you (the admin on the +machine) didn’t install. + +![poc13](/images/endpointpolicymanager/leastprivilege/poc13.webp) + +However, if users were accustomed to downloading their applications, when Endpoint Policy Manager +SecureRun is enabled you could get an increase in helpdesk calls from users unable to run +applications they have installed. + +In a previous step, you removed your users from the Local Administrators group if they were +previously provided with full Local Admin Rights. But these unsanctioned, previously downloaded +applications will still run (Until Endpoint Policy Manager SecureRun is enabled.) + +Before you fully enable Endpoint Policy Manager SecureRun you can, once again, rely upon Global +Audit Settings to alert you for untrusted applications. These are the ones not owned by the +Computername\Administrator, the SYSTEM, TrustedInstaller, or other Administrators on the machine. + +Refer to the Global Auditing step to re-enable these settings to turn on Events for Untrusted and +optionally unsigned applications. + +![poc15](/images/endpointpolicymanager/leastprivilege/poc15.webp) + +Endpoint Policy Manager Least Privilege Manager Discovery Audit Policy Events Additional Notes + +- 6210 AUDIT- Process is untrusted and would have been blocked by SecureRun. Helps with discovering + user-based installs. + +- 6215 - Executable is unsigned and would have been blocked by SecureRun Helps with discovering + user-based installs. + +Then you can investigate those Event IDs that come in and create Allow and Log actions. To learn +more about how Endpoint Policy Manager Least Privilege Manager SecureRun helps you keep ransomware +and unknown applications at bay, but open up specific applications as needed with Allow and Log +actions, please see +[Using Least Privilege Manager's SecureRun Feature](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/feature.md) + +For general tips on how to use SecureRun™ please see +[How can I allow "Inline commands" blocked by SecureRun when a random path or filename is created each time?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipssecurerun/allowinlinecommands.md) + +## Final Thoughts + +This guide should give you the framework for getting your Endpoint Policy ManagerLeast Privilege +Manager implementation up and rolling with Endpoint Policy Manager. + +The next sections have three appendices with project rollout steps (referring to videos and +documentation we’ve mentioned here: one for Active Directory/Group Policy, one for Endpoint Policy +Manager Cloud, and one for Endpoint Policy Manager with an MDM service like Intune. + +If you need any help along the way, simply open a ticket at +[Netwrix Support](https://www.netwrix.com/tickets.html#netwrix-support) and we’ll be happy to give +you one-on-one attention to help you out. + +## Appendix A: Sample Endpoint Privilege Manager Project POC Plan for Endpoint Policy Manager with Active Directory / GPOs; removing local admin rights for 30 Developers + +Estimated Milestone Details and Target Dates + +| Milestone | Details & Tasks | | +| ----------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------- | +| M1 Pre-Requisites | | Day 1 | +| M2 Install PolicyPak CSE, common scenarios and known applications | | Day 4 -6 | +| M3 Set up Event Forwarding | | Day 7 -9 | +| M4 Begin Test | | Day 10 | +| M5 Review Events | | Day 11 | +| M6 Addition | | Day 12 | +| M7 Review Events | | Day 13 | +| M8 Make Rules | Make more Direct rules from 10 endpoints | Day 14 | +| M9 Addition | Add +5 endpoints to Endpoint Policy Manager Active Directory OU and remove their local admin rights. | Day 15 | +| M10 Review Events | Look at EVENTS to determine the issues to make more direct rules. | Day 16 | +| M11 Addition | Add +5 endpoints Endpoint Policy Manager Active Directory OU and remove their local admin rights. | Day 17 | +| M12 Review Events | Look at EVENTS to determine the issues to make more direct rules. | Day 18 | +| M13 Addition | Add +5 endpoints to Endpoint Policy Manager Active Directory OU and remove their local admin rights. | Day 19 | +| M14 Review Events | Look at EVENTS to determine the issues to make more rules. | Day 20 | +| M15 Addition | Add +5 endpoints Endpoint Policy Manager Active Directory OU and remove their local admin rights. | Day 21 | +| M16 Review Events | Look at EVENTS to determine the issues to make more rules. | Day 22 | +| M17 Remaining | Add Remaining endpoints to Endpoint Policy Manager Active Directory OU and remove their local admin rights. | Day 23 | +| M18 SecureRun (Optional) | • Turn on Global Auditing for Untrusted and Unsigned applications. • Try turning on SecureRun for three developers. | Day 24 | +| M19 SecureRun Rollout (Optional) | Add +5 endpoints per day and triage incoming SecureRun blocks with “Allow and Log” rules. Repeat each day with +5 endpoints. | Day 25+ | + + +## Appendix B: Sample Endpoint Privilege Manager Project POC Plan for Endpoint Policy Manager Cloud, removing local admin rights for 30 Developers. + +Estimated Milestone Details and Target Dates + +| Milestone | Details & Tasks | | +| ---------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------- | +| M1 Pre-Requisites | | Day 1-3 | +| M2 Install PPC | | Day 4-6 | +| M3 Begin Test | | Day 7-8 | +| M4 Review Events | | Day 9 | +| M5 Addition | Add 7 more developer PCs to existing 3 and remove local admin rights using existing rules. (Don’t use Self elevate on new 7 endpoint, just the first three). | Day 10 | +| M6 Review Events | | Day 11 | +| M7 Make Rules | Make more Direct rules from 10 endpoints. | Day 12 | +| M8 Addition | Add +5 endpoints to Endpoint Policy Manager Cloud and remove their local admin rights. | Day 13 | +| M9 Review Events | Look at EVENTS to determine the issues to make more direct rules. | Day 14 | +| M10 Addition | Add +5 endpoints to Endpoint Policy Manager Cloud and remove their local admin rights. | Day 15 | +| M11 Review Events | Look at EVENTS to determine the issues to make more direct rules. | Day 16 | +| M12 Addition | Add +5 endpoints to Endpoint Policy Manager Cloud and remove their local admin rights. | Day 17 | +| M13 Review Events | Look at EVENTS to determine the issues to make more rules. | Day 18 | +| M14 Addition | Add +5 endpoints to Endpoint Policy Manager Cloud and remove their local admin rights. | Day 19 | +| M15 Review Events | Look at EVENTS to determine the issues to make more rules. | Day 20 | +| M16 Remaining | Add Remaining endpoints to Endpoint Policy Manager Cloud and remove their local admin rights. | Day 21 | +| M17 SecureRun Setup | | Day 22 | +| M18+ SecureRun Rollout | Add +5 endpoints per day and triage incoming SecureRun blocks with “Allow and Log” rules. Repeat each day with +5 endpoints. | Day 23+ | + + +## Appendix C: Sample Endpoint Privilege Manager Project POC Plan for Endpoint Policy Manager with an MDM service like Intune, removing local admin rights for 30 Developers. + +Estimated Milestone Details and Target Dates + +| Milestones | Details & Tasks | | +| ------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------- | +| M1 Pre-Requisites | | Day 1-3 | +| M2 Install Endpoint Policy Manager CSE, common scenarios and known applications | | Day 4-6 | +| M3 Set up Event Forwarding | | Day 7-9 | +| M4 Begin Test | | Day 10 | +| M5 Review Events | | Day 11 | +| M6 Addition | Add 7 more developer PCs to existing 3 and remove local admin rights using existing rules. (Don’t use Self elevate on new 7 endpoint, just the first three.) | Day 12 | +| M7 Review Events | | Day 13 | +| M8 Make Rules | Make more Direct rules from 10 endpoints. | Day 14 | +| M9 Addition | Add +5 endpoints to Endpoint Policy Manager group and remove their local admin rights. | Day 15 | +| M10 Review Events | Look at EVENTS to determine the issues to make more direct rules. | Day 16 | +| M11 Addition | Add +5 endpoints to Endpoint Policy Manager group and remove their local admin rights. | Day 17 | +| M12 Review Events | Look at EVENTS to determine the issues to make more direct rules. | Day 18 | +| M13 Addition | Add +5 endpoints to Endpoint Policy Manager group and remove their local admin rights. | Day 19 | +| M14 Review Events | Look at EVENTS to determine the issues to make more rules. | Day 20 | +| M15 Addition | Add +5 endpoints to Endpoint Policy Manager group and remove their local admin rights. | Day 21 | +| M16 Review Events | Look at EVENTS to determine the issues to make more rules. | Day 22 | +| M17 Remaining | Add Remaining endpoints to Endpoint Policy Manager group and remove their local admin rights. | Day 23 | +| M18 SecureRun Setup | | Day 24 | +| M19 SecureRun Rollout | Add +5 endpoints per day and triage incoming SecureRun blocks with “Allow and Log” rules. Repeat each day with +5 endpoints. | Day 25+ | diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/_category_.json new file mode 100644 index 0000000000..cb657b91c6 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Video Learning Center", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "videolearningcenter" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/acltraverse/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/acltraverse/_category_.json new file mode 100644 index 0000000000..a9c8c958ee --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/acltraverse/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "ACL Traverse NTFS And Registry", + "position": 50, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/acltraverse/deleteicons.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/acltraverse/deleteicons.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/acltraverse/deleteicons.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/acltraverse/deleteicons.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/acltraverse/modifyhosts.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/acltraverse/modifyhosts.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/acltraverse/modifyhosts.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/acltraverse/modifyhosts.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/acltraverse/ntfspermissions.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/acltraverse/ntfspermissions.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/acltraverse/ntfspermissions.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/acltraverse/ntfspermissions.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/acltraverse/registry.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/acltraverse/registry.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/acltraverse/registry.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/acltraverse/registry.md diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/_category_.json new file mode 100644 index 0000000000..e76356bf6e --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Admin Approval Self Elevate Apply On Demand SecureCopy(TM) And UI Branding", + "position": 60, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/applyondemand.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/applyondemand.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/applyondemand.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/applyondemand.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/autorulesfromadmin.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/autorulesfromadmin.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/autorulesfromadmin.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/autorulesfromadmin.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/branding.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/branding.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/branding.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/branding.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/demo.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/demo.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/demo.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/demo.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/email.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/email.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/email.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/email.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/enforce.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/enforce.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/enforce.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/enforce.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/justificationandauthentication.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/justificationandauthentication.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/justificationandauthentication.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/justificationandauthentication.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/longcodes.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/longcodes.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/longcodes.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/longcodes.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/overrideselfelevate.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/overrideselfelevate.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/overrideselfelevate.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/overrideselfelevate.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/reauthenticate.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/reauthenticate.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/reauthenticate.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/reauthenticate.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/securecopy.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/securecopy.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/securecopy.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/securecopy.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/selfelevate.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/selfelevate.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/selfelevate.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/selfelevate.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/selfelevatedemo.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/selfelevatedemo.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/selfelevatedemo.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/selfelevatedemo.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/setup.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/setup.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/setup.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/setup.md diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/_category_.json new file mode 100644 index 0000000000..1fdad8d1a9 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Basics And Getting Started", + "position": 10, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/applicationcontrol.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/applicationcontrol.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/applicationcontrol.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/applicationcontrol.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/autorulesgeneratortool.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/autorulesgeneratortool.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/autorulesgeneratortool.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/autorulesgeneratortool.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/comsupport.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/comsupport.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/comsupport.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/comsupport.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/feature.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/feature.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/feature.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/feature.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/installapplications.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/installapplications.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/installapplications.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/installapplications.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/localadminrights.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/localadminrights.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/localadminrights.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/localadminrights.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/removelocaladmin.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/removelocaladmin.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/removelocaladmin.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/removelocaladmin.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/uacpromptsactivex.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/uacpromptsactivex.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/uacpromptsactivex.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/uacpromptsactivex.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/userfilter.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/userfilter.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/userfilter.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/userfilter.md diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/_category_.json new file mode 100644 index 0000000000..f077ebe18b --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Best Practices", + "position": 40, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/appblock.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/appblock.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/appblock.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/appblock.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/elevateuwp.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/elevateuwp.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/elevateuwp.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/elevateuwp.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/elevatinguserbasedinstalls.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/elevatinguserbasedinstalls.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/elevatinguserbasedinstalls.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/elevatinguserbasedinstalls.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/msi.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/msi.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/msi.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/msi.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/opensavedialogs.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/opensavedialogs.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/opensavedialogs.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/opensavedialogs.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/powershellblock.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/powershellblock.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/powershellblock.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/powershellblock.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/securitychildprocesses.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/securitychildprocesses.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/securitychildprocesses.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/securitychildprocesses.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/selfelevatemode.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/selfelevatemode.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/selfelevatemode.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/selfelevatemode.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/serviceaccountrights.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/serviceaccountrights.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/serviceaccountrights.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/serviceaccountrights.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/usersystemexecutables.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/usersystemexecutables.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/usersystemexecutables.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/usersystemexecutables.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/wildcards.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/wildcards.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/wildcards.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/wildcards.md diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/businesssolutions/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/businesssolutions/_category_.json new file mode 100644 index 0000000000..c6d3da5762 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/businesssolutions/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Business Solutions", + "position": 90, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/businesssolutions/denyselfelevate.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/businesssolutions/denyselfelevate.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/businesssolutions/denyselfelevate.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/businesssolutions/denyselfelevate.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/businesssolutions/microsoftrecommendations.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/businesssolutions/microsoftrecommendations.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/businesssolutions/microsoftrecommendations.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/businesssolutions/microsoftrecommendations.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/businesssolutions/printeruacprompts.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/businesssolutions/printeruacprompts.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/businesssolutions/printeruacprompts.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/businesssolutions/printeruacprompts.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/businesssolutions/winget.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/businesssolutions/winget.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/businesssolutions/winget.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/businesssolutions/winget.md diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/eventing/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/eventing/_category_.json new file mode 100644 index 0000000000..12da7eb8ef --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/eventing/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Eventing", + "position": 80, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/cloudevents.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/eventing/cloudevents.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/cloudevents.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/eventing/cloudevents.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/discovery.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/eventing/discovery.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/discovery.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/eventing/discovery.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/events.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/eventing/events.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/events.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/eventing/events.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/globalauditevent.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/eventing/globalauditevent.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/globalauditevent.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/eventing/globalauditevent.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/preventevents.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/eventing/preventevents.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/preventevents.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/eventing/preventevents.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/windowseventforwarding.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/eventing/windowseventforwarding.md similarity index 99% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/windowseventforwarding.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/eventing/windowseventforwarding.md index ba52313a5c..33caef9f8f 100644 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/windowseventforwarding.md +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/eventing/windowseventforwarding.md @@ -195,4 +195,4 @@ throwing UAC prompts and help you create rules to bypass them, you can do that r Thank you very much for watching, and talk to you soon. Related -article: [How to forward interesting events for Least Privilege Manager (or anything else) to a centralized location using Windows Event Forwarding.](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/eventing/windowseventforwarding.md) +article: [How to forward interesting events for Least Privilege Manager (or anything else) to a centralized location using Windows Event Forwarding.](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/eventing/windowseventforwarding.md) diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/helperstoolsandtips/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/helperstoolsandtips/_category_.json new file mode 100644 index 0000000000..ccaf18cc15 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/helperstoolsandtips/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Helpers Tools And Tips And Tricks", + "position": 70, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/helperstoolsandtips/helperdesktopshortcut.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/helperstoolsandtips/helperdesktopshortcut.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/helperstoolsandtips/helperdesktopshortcut.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/helperstoolsandtips/helperdesktopshortcut.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/helperstoolsandtips/ntprintdialog.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/helperstoolsandtips/ntprintdialog.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/helperstoolsandtips/ntprintdialog.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/helperstoolsandtips/ntprintdialog.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/helperstoolsandtips/toolssetup.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/helperstoolsandtips/toolssetup.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/helperstoolsandtips/toolssetup.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/helperstoolsandtips/toolssetup.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/helperstoolsandtips/uacprompts.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/helperstoolsandtips/uacprompts.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/helperstoolsandtips/uacprompts.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/helperstoolsandtips/uacprompts.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/helperstoolsandtips/wingui.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/helperstoolsandtips/wingui.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/helperstoolsandtips/wingui.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/helperstoolsandtips/wingui.md diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/_category_.json new file mode 100644 index 0000000000..cc9ea8bf5d --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "How To And Tech Support", + "position": 20, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/denymessages.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/denymessages.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/denymessages.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/denymessages.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/installfonts.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/installfonts.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/installfonts.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/installfonts.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/itemleveltargeting.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/itemleveltargeting.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/itemleveltargeting.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/itemleveltargeting.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/preventedge.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/preventedge.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/preventedge.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/preventedge.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/preventunsigned.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/preventunsigned.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/preventunsigned.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/preventunsigned.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/preventusercommands.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/preventusercommands.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/preventusercommands.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/preventusercommands.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/scripts.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/scripts.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/scripts.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/scripts.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/securitycomborules.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/securitycomborules.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/securitycomborules.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/securitycomborules.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/stopransomware.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/stopransomware.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/stopransomware.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/stopransomware.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/windowsuniversalapplications.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/windowsuniversalapplications.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/windowsuniversalapplications.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/windowsuniversalapplications.md diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/_category_.json new file mode 100644 index 0000000000..49fae9fd12 --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Mac Integration", + "position": 110, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/adminapproval.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/adminapproval.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/adminapproval.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/adminapproval.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/applicationlaunch.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/applicationlaunch.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/applicationlaunch.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/applicationlaunch.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/applicationpackage.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/applicationpackage.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/applicationpackage.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/applicationpackage.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/cloudinstall.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/cloudinstall.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/cloudinstall.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/cloudinstall.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/collectdiagnostics.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/collectdiagnostics.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/collectdiagnostics.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/collectdiagnostics.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/eventscollector.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/eventscollector.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/eventscollector.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/eventscollector.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/finder.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/finder.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/finder.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/finder.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/macjointoken.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/macjointoken.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/macjointoken.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/macjointoken.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/mountunmounpart2.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/mountunmounpart2.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/mountunmounpart2.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/mountunmounpart2.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/mountunmountpart1.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/mountunmountpart1.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/mountunmountpart1.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/mountunmountpart1.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/policycandidates.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/policycandidates.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/policycandidates.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/policycandidates.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/privilege.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/privilege.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/privilege.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/privilege.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/sudosupport.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/sudosupport.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/sudosupport.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/sudosupport.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/systemsettings.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/systemsettings.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/systemsettings.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/systemsettings.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/wildcards.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/wildcards.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/wildcards.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/wildcards.md diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/methods/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/methods/_category_.json new file mode 100644 index 0000000000..911af3206e --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/methods/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Methods Cloud MDM SCCM PDQ", + "position": 30, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/methods/cloudrules.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/methods/cloudrules.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/methods/cloudrules.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/methods/cloudrules.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/methods/mdm.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/methods/mdm.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/methods/mdm.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/methods/mdm.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/methods/pdqdeploy.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/methods/pdqdeploy.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/methods/pdqdeploy.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/methods/pdqdeploy.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/methods/pdqdeployblockmalware.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/methods/pdqdeployblockmalware.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/methods/pdqdeployblockmalware.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/methods/pdqdeployblockmalware.md diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/netwrixprivilegesecure/_category_.json b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/netwrixprivilegesecure/_category_.json new file mode 100644 index 0000000000..277c5036dc --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/netwrixprivilegesecure/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Netwrix Privilege Secure For Access Management Integration", + "position": 100, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/netwrixprivilegesecure/license.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/netwrixprivilegesecure/license.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/netwrixprivilegesecure/license.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/netwrixprivilegesecure/license.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/netwrixprivilegesecure/privilegesecure.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/netwrixprivilegesecure/privilegesecure.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/netwrixprivilegesecure/privilegesecure.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/netwrixprivilegesecure/privilegesecure.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/netwrixprivilegesecure/privilegesecureclient.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/netwrixprivilegesecure/privilegesecureclient.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/netwrixprivilegesecure/privilegesecureclient.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/netwrixprivilegesecure/privilegesecureclient.md diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/netwrixprivilegesecure/selfelevatemode.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/netwrixprivilegesecure/selfelevatemode.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/netwrixprivilegesecure/selfelevatemode.md rename to docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/netwrixprivilegesecure/selfelevatemode.md diff --git a/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/videolearningcenter.md b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/videolearningcenter.md new file mode 100644 index 0000000000..3ec8b1eb0b --- /dev/null +++ b/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/videolearningcenter.md @@ -0,0 +1,121 @@ +--- +title: "Video Learning Center" +description: "Video Learning Center" +sidebar_position: 20 +--- + +# Video Learning Center + +See the following Video topics for more information on Least Privilege Manager. + +## Basics and Getting Started + +- [Kill Local Admin Rights (Run applications with Least Privilege)](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/localadminrights.md) +- [Use Group Policy to remove local admin rights (then Endpoint Policy Manager to enable Least Privilege)](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/removelocaladmin.md) +- [Link to Computer, Filter by User](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/userfilter.md) +- [Installing applications-and-Preconfigured-Rules](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/installapplications.md) +- [Auto Rules Generator Tool (with SecureRun)](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/autorulesgeneratortool.md) +- [Endpoint Policy Manager Application Control with PP Least Privilege Manager](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/applicationcontrol.md) +- [Using Least Privilege Manager's SecureRun Feature](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/feature.md) +- [COM Support](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/comsupport.md) +- [Overcome UAC prompts for Active X controls](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/uacpromptsactivex.md) + +## How-To & Tech Support + +- [Elevate (or smack down) scripts and Java JAR files](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/scripts.md) +- [Enable end-users to install their own fonts](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/installfonts.md) +- [Manage, block and allow Windows Universal (UWP) applications](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/windowsuniversalapplications.md) +- [More security with Combo Rules](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/securitycomborules.md) +- [Least Privilege Manager: Deny Messages](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/denymessages.md) +- [Prevent Edge from Launching](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/preventedge.md) +- [Stop Ransomware and other unknown zero day attacks with Endpoint Policy Manager SecureRun(TM)](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/stopransomware.md) +- [Least Privilege Manager: Block All Unsigned with SecureRun](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/preventunsigned.md) +- [Endpoint Privilege Manager: Use Item Level Targeting to hone in when rules apply.](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/itemleveltargeting.md) + +## Methods: Cloud, MDM, SCCM, PDQ + +- [Use Endpoint Policy Manager Cloud to deploy PP Least Privilege Manager rules](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/methods/cloudrules.md) +- [Using Least Privilege Manager with your MDM service](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/methods/mdm.md) +- [Deploying Apps that Require Admin Rights Using Endpoint Policy Manager and PDQ Deploy](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/methods/pdqdeploy.md) +- [Blocking Malware with Endpoint Policy Manager and PDQ Deploy](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/methods/pdqdeployblockmalware.md) + +## Best Practices + +- [Best Practices for Elevating User-Based Installs](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/elevatinguserbasedinstalls.md) +- [PPLPM Elevating UWP Applications](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/elevateuwp.md) +- [Best Practices of MSI installations from the Windows Store (UWP Applications) ](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/msi.md) +- [Security and Child Processes](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/securitychildprocesses.md) +- [Increase security by reducing rights on Open/Save dialogs](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/opensavedialogs.md) +- [Endpoint Privilege Manager and Wildcards](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/wildcards.md) +- [Reduce or specify Service Account Rights](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/serviceaccountrights.md) +- [Block PowerShell in General, Open up for specific items](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/powershellblock.md) +- [SecureRun to block User AND System executables](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/usersystemexecutables.md) +- [Elevate apps as standard user, BLOCK other Admins](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/appblock.md) +- [Endpoint Policy Manager Least Priv Manager: Self Elevate Mode](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/selfelevatemode.md) + +## ACL Traverse: NTFS and Registry + +- [Endpoint Policy Manager: ACL Traverse to enable users to delete icons on desktop](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/acltraverse/deleteicons.md) +- [Endpoint Policy Manager and ACL Traverse: How to give rights to modify HOSTS files and similar](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/acltraverse/modifyhosts.md) +- [Endpoint Policy Manager ACL and File Traverse: Let any application in Programfiles overcome NTFS permissions](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/acltraverse/ntfspermissions.md) +- [Endpoint Policy Manager: Overcome ACLs in Registry even as Standard User](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/acltraverse/registry.md) + +## Admin Approval, Self Elevate, Apply on Demand, SecureCopy(TM), and UI Branding + +- [Admin Approval demo](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/demo.md) +- [Using Email / Long Codes](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/longcodes.md) +- [Understand "Enforce Admin Approval for all installers" behavior](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/enforce.md) +- [Endpoint Privilege Manager: Admin Approval Email method (with Notepad instead)](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/email.md) +- [Self Elevate Mode](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/demo.md) +- [Endpoint Privilege: Re-Authenticate with Self Elevate](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/reauthenticate.md) +- [Least Privilege Manager: Apply On Demand](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/applyondemand.md) +- [SecureCopy(TM). Empower users to copy then elevate items](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/securecopy.md) +- [Branding the UI and Dialogs](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/branding.md) +- [Endpoint Privilege Manager Automatic Rules Creation from Admin Approval Requests](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/autorulesfromadmin.md) + +## Helpers Tools & Tips and Tricks + +- [Overcome Network Card, Printer, and Remove Programs UAC prompts](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/helperstoolsandtips/uacprompts.md) +- [Endpoint Policy Manager Least Priv Manager Tools Setup](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/helperstoolsandtips/toolssetup.md) +- [Getting the helper tools as desktop shortcuts](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/helperstoolsandtips/helperdesktopshortcut.md) +- [Endpoint Privilege Manager: Install Printers via Native NTPRINT Dialog](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/helperstoolsandtips/ntprintdialog.md) +- [Endpoint Privilege Manager: Edit IP SETTINGS EDIT VIA WIN GUI](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/helperstoolsandtips/wingui.md) + +## Eventing + +- [Events](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/eventing/events.md) +- [Use Discovery to know what rules to make as you transition from Local Admin rights](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/eventing/discovery.md) +- [Endpoint Policy Manager Cloud + PPLPM + Events: Collect Events in the Cloud](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/eventing/cloudevents.md) +- [Using Windows Event Forwarding to search for interesting events](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/eventing/windowseventforwarding.md) +- [Auto-Create Policy from Global Audit event](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/eventing/globalauditevent.md) + +## Business Solutions + +- [Endpoint Policy Manager and WinGet: Overcome UAC prompts when standard users use Windows Package Manager](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/businesssolutions/winget.md) +- [Overcome Print Nightmare Standard User UAC Prompts](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/businesssolutions/printeruacprompts.md) +- [Microsoft WDAC recommended block rules Guidance](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/businesssolutions/microsoftrecommendations.md) +- [PPLPM: Deny Wins Over Self Elevate (using Java installation as example)](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/businesssolutions/denyselfelevate.md) + +## Netwrix Privilege Secure for Access Management Integration + +- [Netwrix Privilege Secure Client - Getting Started with MMC with/without Endpoint Policy Manager ](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/netwrixprivilegesecure/privilegesecure.md) +- [Netwrix Privilege Secure and the NPS/Endpoint Policy Manager Client](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/netwrixprivilegesecure/privilegesecureclient.md) +- [Endpoint Privilege Manager: NPS Self Elevate Mode (Paid Feature)](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/netwrixprivilegesecure/selfelevatemode.md) +- [Netwrix Privilege Secure and LICENSING](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/netwrixprivilegesecure/license.md) + +## Mac Integration + +- [Endpoint Policy Managerfor MacOS Installation (using Endpoint Policy Manager Cloud)](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/cloudinstall.md) +- [Mac and Jointoken](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/macjointoken.md) +- [Endpoint Policy Manager Least Priv Manager for Macs Application Package Support](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/applicationpackage.md) +- [Endpoint Policy Manager for Mac / Least Priv Manager: System Settings policy](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/systemsettings.md) +- [Endpoint Policy Manager Cloud and SUDO support](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/sudosupport.md) +- [Endpoint Policy Manager Cloud Mac + SUDO Using Wildcard Example](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/wildcards.md) +- [Application Launch Approval](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/applicationlaunch.md) +- [Endpoint Policy Manager Cloud +Least Privilege Manager for Mac Events collector](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/eventscollector.md) +- [Endpoint Policy Manager for Mac and Admin Approval](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/adminapproval.md) +- [Endpoint Privilege Manager for Mac: Mount / Unmount Part I](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/mountunmountpart1.md) +- [Endpoint Privilege Manager for Mac: Mount / Unmount Part II](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/mountunmounpart2.md) +- [Endpoint Policy Manager MacOS: Mac Finder Policies](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/finder.md) +- [Endpoint Policy Manager LPM for MacOS: Privilege Policies (for Helper Apps)](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/privilege.md) +- [Collect Diagnostics](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/macintegration/collectdiagnostics.md) diff --git a/docs/endpointpolicymanager/components/featuremanager/_category_.json b/docs/endpointpolicymanager/components/featuremanager/_category_.json new file mode 100644 index 0000000000..d743384097 --- /dev/null +++ b/docs/endpointpolicymanager/components/featuremanager/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Feature Manager For Windows", + "position": 6, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/featuremanager/manual/_category_.json b/docs/endpointpolicymanager/components/featuremanager/manual/_category_.json new file mode 100644 index 0000000000..cd6b8d995f --- /dev/null +++ b/docs/endpointpolicymanager/components/featuremanager/manual/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Manual", + "position": 5, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/featuremanager/manual/addremove/_category_.json b/docs/endpointpolicymanager/components/featuremanager/manual/addremove/_category_.json new file mode 100644 index 0000000000..bb6fb59505 --- /dev/null +++ b/docs/endpointpolicymanager/components/featuremanager/manual/addremove/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Quick Start - Adding and Removing Features", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/feature/addremove/collections.md b/docs/endpointpolicymanager/components/featuremanager/manual/addremove/collections.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/feature/addremove/collections.md rename to docs/endpointpolicymanager/components/featuremanager/manual/addremove/collections.md diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/feature/addremove/overview.md b/docs/endpointpolicymanager/components/featuremanager/manual/addremove/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/feature/addremove/overview.md rename to docs/endpointpolicymanager/components/featuremanager/manual/addremove/overview.md diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/feature/addremove/policies.md b/docs/endpointpolicymanager/components/featuremanager/manual/addremove/policies.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/feature/addremove/policies.md rename to docs/endpointpolicymanager/components/featuremanager/manual/addremove/policies.md diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/feature/addremove/test.md b/docs/endpointpolicymanager/components/featuremanager/manual/addremove/test.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/feature/addremove/test.md rename to docs/endpointpolicymanager/components/featuremanager/manual/addremove/test.md diff --git a/docs/endpointpolicymanager/components/featuremanager/manual/advanced/_category_.json b/docs/endpointpolicymanager/components/featuremanager/manual/advanced/_category_.json new file mode 100644 index 0000000000..9ab1f3babb --- /dev/null +++ b/docs/endpointpolicymanager/components/featuremanager/manual/advanced/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Advanced Manipulations of Policies and Collections", + "position": 30, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/feature/advanced/createcollection.md b/docs/endpointpolicymanager/components/featuremanager/manual/advanced/createcollection.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/feature/advanced/createcollection.md rename to docs/endpointpolicymanager/components/featuremanager/manual/advanced/createcollection.md diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/feature/advanced/deletepolicies.md b/docs/endpointpolicymanager/components/featuremanager/manual/advanced/deletepolicies.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/feature/advanced/deletepolicies.md rename to docs/endpointpolicymanager/components/featuremanager/manual/advanced/deletepolicies.md diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/feature/advanced/editcollection.md b/docs/endpointpolicymanager/components/featuremanager/manual/advanced/editcollection.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/feature/advanced/editcollection.md rename to docs/endpointpolicymanager/components/featuremanager/manual/advanced/editcollection.md diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/feature/advanced/editpolicy.md b/docs/endpointpolicymanager/components/featuremanager/manual/advanced/editpolicy.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/feature/advanced/editpolicy.md rename to docs/endpointpolicymanager/components/featuremanager/manual/advanced/editpolicy.md diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/feature/advanced/mixedrule.md b/docs/endpointpolicymanager/components/featuremanager/manual/advanced/mixedrule.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/feature/advanced/mixedrule.md rename to docs/endpointpolicymanager/components/featuremanager/manual/advanced/mixedrule.md diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/feature/advanced/overview.md b/docs/endpointpolicymanager/components/featuremanager/manual/advanced/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/feature/advanced/overview.md rename to docs/endpointpolicymanager/components/featuremanager/manual/advanced/overview.md diff --git a/docs/endpointpolicymanager/components/featuremanager/manual/feature/_category_.json b/docs/endpointpolicymanager/components/featuremanager/manual/feature/_category_.json new file mode 100644 index 0000000000..81c84e7790 --- /dev/null +++ b/docs/endpointpolicymanager/components/featuremanager/manual/feature/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Troubleshooting", + "position": 60, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/feature/feature/events.md b/docs/endpointpolicymanager/components/featuremanager/manual/feature/events.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/feature/feature/events.md rename to docs/endpointpolicymanager/components/featuremanager/manual/feature/events.md diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/feature/feature/logs.md b/docs/endpointpolicymanager/components/featuremanager/manual/feature/logs.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/feature/feature/logs.md rename to docs/endpointpolicymanager/components/featuremanager/manual/feature/logs.md diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/feature/feature/overview.md b/docs/endpointpolicymanager/components/featuremanager/manual/feature/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/feature/feature/overview.md rename to docs/endpointpolicymanager/components/featuremanager/manual/feature/overview.md diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/feature/gettoknow.md b/docs/endpointpolicymanager/components/featuremanager/manual/gettoknow.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/feature/gettoknow.md rename to docs/endpointpolicymanager/components/featuremanager/manual/gettoknow.md diff --git a/docs/endpointpolicymanager/components/featuremanager/manual/itemleveltargeting/_category_.json b/docs/endpointpolicymanager/components/featuremanager/manual/itemleveltargeting/_category_.json new file mode 100644 index 0000000000..ac0f99bc29 --- /dev/null +++ b/docs/endpointpolicymanager/components/featuremanager/manual/itemleveltargeting/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Using Item-Level Targeting with Collections and Policies", + "position": 50, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/featuremanager/manual/itemleveltargeting/exportcollections.md b/docs/endpointpolicymanager/components/featuremanager/manual/itemleveltargeting/exportcollections.md new file mode 100644 index 0000000000..ecf6307883 --- /dev/null +++ b/docs/endpointpolicymanager/components/featuremanager/manual/itemleveltargeting/exportcollections.md @@ -0,0 +1,45 @@ +--- +title: "Exporting Collections" +description: "Exporting Collections" +sidebar_position: 20 +--- + +# Exporting Collections + +In +[Using Item-Level Targeting with Collections and Policies](/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/overview.md) +we explain how to use the Endpoint Policy Manager Exporter to wrap up any Endpoint Policy Manager +directives and deliver them using Microsoft Endpoint Manager (SCCM and Intune), KACE, your own MDM +service, or Endpoint Policy Manager Cloud. To export a policy for later use using Endpoint Policy +Manager Exporter or Endpoint Policy Manager Cloud, right-click the collection or the policy and +select Export to XML. This will enable you to save an XML file for later use. + +:::note +For a video demonstrating the use of Endpoint Policy Manager Feature Manager for Windows +with Endpoint Policy Manager MDM see +[https://www.endpointpolicymanager.com/video/endpointpolicymanager-feature-manager-for-windows-mdm.html](https://www.endpointpolicymanager.com/video/endpointpolicymanager-feature-manager-for-windows-mdm.html). +::: + + +Remember that Endpoint Policy Manager Feature Manager for Windows policies can be created and then +exported on the Computer side. For instance, below, you can see a setting being exported. You can +also do this for an entire collection (not shown). + +![using_item_level_targeting_5](/images/endpointpolicymanager/feature/itemleveltargeting/using_item_level_targeting_5.webp) + +:::note +For a video showing how to export policies and use Endpoint Policy Manager Exporter, watch +[https://www.endpointpolicymanager.com/video/deploying-endpointpolicymanager-directives-without-group-policy-endpointpolicymanager-exporter-utility.html](https://www.endpointpolicymanager.com/video/deploying-endpointpolicymanager-directives-without-group-policy-endpointpolicymanager-exporter-utility.html). +::: + + +:::note +Exported collections or policies maintain any Item-Level Targeting set within them. If +you've used items that represent Group Membership in Active Directory, then those items will only +function when the machine is domain-joined. +::: + + +For more information on how to use exported policies with Endpoint Policy Manager Cloud or Endpoint +Policy Manager MDM see +[Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/uemtools.md). diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/feature/itemleveltargeting/overview.md b/docs/endpointpolicymanager/components/featuremanager/manual/itemleveltargeting/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/feature/itemleveltargeting/overview.md rename to docs/endpointpolicymanager/components/featuremanager/manual/itemleveltargeting/overview.md diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/feature/itemleveltargeting/processorderprecedence.md b/docs/endpointpolicymanager/components/featuremanager/manual/itemleveltargeting/processorderprecedence.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/feature/itemleveltargeting/processorderprecedence.md rename to docs/endpointpolicymanager/components/featuremanager/manual/itemleveltargeting/processorderprecedence.md diff --git a/docs/endpointpolicymanager/components/featuremanager/manual/overview.md b/docs/endpointpolicymanager/components/featuremanager/manual/overview.md new file mode 100644 index 0000000000..99d5a7d00c --- /dev/null +++ b/docs/endpointpolicymanager/components/featuremanager/manual/overview.md @@ -0,0 +1,131 @@ +--- +title: "Feature Manager for Windows" +description: "Feature Manager for Windows" +sidebar_position: 20 +--- + +# Feature Manager for Windows + +:::note +Before reading this section, please ensure you have read +[Installation Quick Start](/docs/endpointpolicymanager/gettingstarted/overviewinstall/overviewinstall.md), which will help you +with the following: +::: + + +- Install the Admin MSI on your GPMC machine +- Install the CSE on a test Windows machine +- Set up a computer in Trial mode or Licensed mode +- Set up a common OU structure + +Optionally, if you don't want to use Group Policy, read the section on +[MDM & UEM Tools](/docs/endpointpolicymanager/gettingstarted/mdmmanual/overview.md)[MDM & UEM Tools](/docs/endpointpolicymanager/gettingstarted/mdmmanual/overview.md). + +Endpoint Policy Manager Feature Manager for Windows allows you to perform the following operations +on Windows 10 or Windows Server (2016 and later): + +- Add features to existing Windows machines +- Remove features from existing Windows machines +- Add optional features to existing Windows machines +- Remove optional features from existing Windows machines +- Limit which machines get policies via Item-Level Targeting +- Specify how to handle reboot requests when features need them + +:::note +Watch this video for an overview of Endpoint Policy Manager Feature Manager for Windows: +[https://www.endpointpolicymanager.com/video/endpointpolicymanager-feature-manager-for-windows.html](https://www.endpointpolicymanager.com/video/endpointpolicymanager-feature-manager-for-windows.html) +::: + + +Endpoint Policy Manager Feature Manager for Windows allows you to do the following: + +- Export the Endpoint Policy Manager Feature Manager for Windows rules and deliver them in one of + these four ways: + + - Microsoft Endpoint Manager (SCCM and Intune) + - Your own systems management software + - A mobile device management (MDM) service + - Endpoint Policy Manager Cloud service + +- Allow the client machine with the Endpoint Policy Manager client-side extension (CSE) to embrace + the directives and perform the work. + +:::note +If you use the Endpoint Policy Manager Cloud service, you can deliver Group Policy +settings even to non-domain-joined machines over the Internet. +::: + + +## Moving Parts + +- A management station: The Endpoint Policy Manager Admin Console MSI must be installed on the + management station where you create group policy objects (GPOs). Once it is installed, you'll see + the `PolicyPak | PolicyPak Feature Manager` for Windows node. +- The Endpoint Policy Manager CSE: This runs on the client (target) machine and is the same CSE for + all Endpoint Policy Manager products. There isn't anything separate to install, and the Endpoint + Policy Manager CSE must be present in order to accept Endpoint Policy Manager Feature Manager for + Windows directives via Group Policy, or when using Microsoft Endpoint Manager (SCCM and Intune), + KACE, MDM, or similar utilities. +- Endpoints: In order to use these, they must be licensed for Endpoint Policy Manager Feature + Manager for Windows using one of the licensing methods. +- Endpoint Policy Manager Exporter (optional): A free utility that lets you take Endpoint Policy + Manager Admin Templates Manager and our other products' XML files and wrap them into a portable + MSI file for deployment using Microsoft Endpoint Manager (SCCM and Intune), an MDM service, or + your own systems management software. + +## Ins and Outs + +Endpoint Policy Manager Feature Manager for Windows solves several important Windows 10 issues. Its +basic goal is to turn on and off Windows features and optional features. Many IT admins will preset +the features and optional features they want into their workstation and server images, only to find +out later they need to pull back from them, or add another feature or an optional feature. Once your +systems are deployed, it is very difficult to change your mind later and add features, languages, +or, starting with Windows 10 (build 1809), add tools from the Remote Server Admin Toolkit (RSAT). +Endpoint Policy Manager File Delivery Manager automates the process by allowing you to add or remove +whatever features or optional features you want with a few clicks. + +There is an in-box method of managing features and optional features on each machine, which requires +you to address each feature one by one. On any given machine, you can manage features and optional +features. + +![about_policypak_feature_manager](/images/endpointpolicymanager/feature/about_endpointpolicymanager_feature_manager.webp) + +There are two ways to manage features: with the Windows Features Control Pane, or the Windows +Settings page . These options can be accessed through the Start Menu. + +![about_policypak_feature_manager_1](/images/endpointpolicymanager/feature/about_endpointpolicymanager_feature_manager_1.webp) + +![about_policypak_feature_manager_2](/images/endpointpolicymanager/feature/about_endpointpolicymanager_feature_manager_2.webp) + +With optional features, you can add or subtract the feature you want. Below is an example of what +this looks like. + +![about_policypak_feature_manager_3](/images/endpointpolicymanager/feature/about_endpointpolicymanager_feature_manager_3.webp) + +An alternate way to perform similar functions is via the DISM command on the command line. For +example, to install the Hyper-V feature on a machine, you would use the DISM command. + +![about_policypak_feature_manager_4](/images/endpointpolicymanager/feature/about_endpointpolicymanager_feature_manager_4.webp) + +This process can be scripted, but the challenge is that the system will typically reboot when it +wants to, perhaps during a user's session. Additionally, scripts will typically run over and over +again, which is not great, and could cause undesired reboots. This is why Endpoint Policy Manager +Feature Manager for Windows eliminates the need to use scripts to add or remove features. Also, +Endpoint Policy Manager Feature Manager for Windows gives you time back, so you don't have to deal +with adding or removing features and optional features from the build process. So, instead of +presetting these into your image or just dealing with it later, Endpoint Policy Manager Feature +Manager for Windows enables you to manage these settings with policies. + +## Advantages of Using Feature Manager for Windows + +With Endpoint Policy Manager Feature Manager for Windows, the advantages you get are based upon the +policy method you already employ. + +- For those using Group Policy: + + - You can add or remove features for any number of computers (desktops or servers). + - You can use Item-Level Targeting to determine which computers should get which features. + +- For those using Endpoint Policy Manager Cloud and Endpoint Policy Manager MDM: Because your + machines might be roaming, you can use Endpoint Policy Manager to deliver a new policy to install + or uninstall a required feature. diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/feature/windowsservers.md b/docs/endpointpolicymanager/components/featuremanager/manual/windowsservers.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/feature/windowsservers.md rename to docs/endpointpolicymanager/components/featuremanager/manual/windowsservers.md diff --git a/docs/endpointpolicymanager/components/featuremanager/technotes/_category_.json b/docs/endpointpolicymanager/components/featuremanager/technotes/_category_.json new file mode 100644 index 0000000000..d50e383b71 --- /dev/null +++ b/docs/endpointpolicymanager/components/featuremanager/technotes/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Tech Notes", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "knowledgebase" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/featuremanager/technotes/knowledgebase.md b/docs/endpointpolicymanager/components/featuremanager/technotes/knowledgebase.md new file mode 100644 index 0000000000..5355dec885 --- /dev/null +++ b/docs/endpointpolicymanager/components/featuremanager/technotes/knowledgebase.md @@ -0,0 +1,13 @@ +--- +title: "Knowledge Base" +description: "Knowledge Base" +sidebar_position: 10 +--- + +# Knowledge Base + +See the following Knowledge Base articles for Feature Manager for Windows. + +## Troubleshooting + +- [Endpoint Policy Feature Manager for Windows doesn't appear to be working and we're getting error code 0x800f0954. What can I try?](/docs/endpointpolicymanager/components/featuremanager/technotes/troubleshooting/code0x800f0954.md) diff --git a/docs/endpointpolicymanager/components/featuremanager/technotes/troubleshooting/_category_.json b/docs/endpointpolicymanager/components/featuremanager/technotes/troubleshooting/_category_.json new file mode 100644 index 0000000000..5a4bd8ada0 --- /dev/null +++ b/docs/endpointpolicymanager/components/featuremanager/technotes/troubleshooting/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Troubleshooting", + "position": 10, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/featuremanager/knowledgebase/troubleshooting/code0x800f0954.md b/docs/endpointpolicymanager/components/featuremanager/technotes/troubleshooting/code0x800f0954.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/featuremanager/knowledgebase/troubleshooting/code0x800f0954.md rename to docs/endpointpolicymanager/components/featuremanager/technotes/troubleshooting/code0x800f0954.md diff --git a/docs/endpointpolicymanager/components/featuremanager/videos/_category_.json b/docs/endpointpolicymanager/components/featuremanager/videos/_category_.json new file mode 100644 index 0000000000..77675c0c90 --- /dev/null +++ b/docs/endpointpolicymanager/components/featuremanager/videos/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Videos", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "videolearningcenter" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/featuremanager/videos/allvideos/_category_.json b/docs/endpointpolicymanager/components/featuremanager/videos/allvideos/_category_.json new file mode 100644 index 0000000000..1e25e31abb --- /dev/null +++ b/docs/endpointpolicymanager/components/featuremanager/videos/allvideos/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "All Videos", + "position": 10, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/featuremanager/videolearningcenter/allvideos/cloud.md b/docs/endpointpolicymanager/components/featuremanager/videos/allvideos/cloud.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/featuremanager/videolearningcenter/allvideos/cloud.md rename to docs/endpointpolicymanager/components/featuremanager/videos/allvideos/cloud.md diff --git a/docs/endpointpolicymanager/knowledgebase/featuremanager/videolearningcenter/allvideos/mdm.md b/docs/endpointpolicymanager/components/featuremanager/videos/allvideos/mdm.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/featuremanager/videolearningcenter/allvideos/mdm.md rename to docs/endpointpolicymanager/components/featuremanager/videos/allvideos/mdm.md diff --git a/docs/endpointpolicymanager/knowledgebase/featuremanager/videolearningcenter/allvideos/windows.md b/docs/endpointpolicymanager/components/featuremanager/videos/allvideos/windows.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/featuremanager/videolearningcenter/allvideos/windows.md rename to docs/endpointpolicymanager/components/featuremanager/videos/allvideos/windows.md diff --git a/docs/endpointpolicymanager/knowledgebase/featuremanager/videolearningcenter/allvideos/windowsservers.md b/docs/endpointpolicymanager/components/featuremanager/videos/allvideos/windowsservers.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/featuremanager/videolearningcenter/allvideos/windowsservers.md rename to docs/endpointpolicymanager/components/featuremanager/videos/allvideos/windowsservers.md diff --git a/docs/endpointpolicymanager/components/featuremanager/videos/videolearningcenter.md b/docs/endpointpolicymanager/components/featuremanager/videos/videolearningcenter.md new file mode 100644 index 0000000000..385a23b532 --- /dev/null +++ b/docs/endpointpolicymanager/components/featuremanager/videos/videolearningcenter.md @@ -0,0 +1,16 @@ +--- +title: "Video Learning Center" +description: "Video Learning Center" +sidebar_position: 20 +--- + +# Video Learning Center + +See the following Video topics for Scripts and Feature Manager for Windows. + +## All Videos + +- [Feature Manager For Windows](/docs/endpointpolicymanager/components/featuremanager/videos/allvideos/windows.md) +- [Feature Manager For Windows Servers](/docs/endpointpolicymanager/components/featuremanager/videos/allvideos/windowsservers.md) +- [Feature Manager for Windows + Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/components/featuremanager/videos/allvideos/cloud.md) +- [Feature Manager for Windows + MDM](/docs/endpointpolicymanager/components/featuremanager/videos/allvideos/mdm.md) diff --git a/docs/endpointpolicymanager/components/fileassociationsmanager/_category_.json b/docs/endpointpolicymanager/components/fileassociationsmanager/_category_.json new file mode 100644 index 0000000000..1f2f14c145 --- /dev/null +++ b/docs/endpointpolicymanager/components/fileassociationsmanager/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "File Associations Manager", + "position": 7, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} diff --git a/docs/endpointpolicymanager/components/fileassociationsmanager/knowledgebase/_category_.json b/docs/endpointpolicymanager/components/fileassociationsmanager/knowledgebase/_category_.json new file mode 100644 index 0000000000..f890ea6095 --- /dev/null +++ b/docs/endpointpolicymanager/components/fileassociationsmanager/knowledgebase/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Tech Notes", + "position": 3, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "knowledgebase" + } +} diff --git a/docs/endpointpolicymanager/components/fileassociationsmanager/knowledgebase/installation/_category_.json b/docs/endpointpolicymanager/components/fileassociationsmanager/knowledgebase/installation/_category_.json new file mode 100644 index 0000000000..ee3640f7af --- /dev/null +++ b/docs/endpointpolicymanager/components/fileassociationsmanager/knowledgebase/installation/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Installation and Uninstallation", + "position": 1, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/components/fileassociationsmanager/knowledgebase/knowledgebase.md b/docs/endpointpolicymanager/components/fileassociationsmanager/knowledgebase/knowledgebase.md new file mode 100644 index 0000000000..55086aed73 --- /dev/null +++ b/docs/endpointpolicymanager/components/fileassociationsmanager/knowledgebase/knowledgebase.md @@ -0,0 +1,30 @@ +--- +title: File Associations Manager Technical Notes +description: Technical documentation for File Associations Manager +--- + +# File Associations Manager Technical Notes + +Technical documentation for File Associations Manager installation, troubleshooting, and advanced configuration. + +## Technical Sections + +- [Installation and Uninstallation](installation) - Setup procedures and requirements +- [Troubleshooting](troubleshooting) - Common issues and solutions +- [Tips and Tricks](tipsandtricks) - Advanced techniques and best practices + +## Overview + +File Associations Manager provides enterprise-level control over file type associations and protocol handlers. This technical documentation helps IT administrators implement, maintain, and troubleshoot the component. + +## Common Topics + +- File association XML configuration +- Registry modifications and impacts +- User vs. system-level associations +- Troubleshooting association conflicts +- Logging and diagnostics + +--- + +*For additional support, consult the troubleshooting section or contact technical support.* diff --git a/docs/endpointpolicymanager/components/fileassociationsmanager/knowledgebase/tipsandtricks/_category_.json b/docs/endpointpolicymanager/components/fileassociationsmanager/knowledgebase/tipsandtricks/_category_.json new file mode 100644 index 0000000000..a74978754e --- /dev/null +++ b/docs/endpointpolicymanager/components/fileassociationsmanager/knowledgebase/tipsandtricks/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Tips and Tricks", + "position": 3, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/tipsandtricks/cortana.md b/docs/endpointpolicymanager/components/fileassociationsmanager/knowledgebase/tipsandtricks/cortana.md similarity index 92% rename from docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/tipsandtricks/cortana.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/knowledgebase/tipsandtricks/cortana.md index 44eb61eb14..4779da3917 100644 --- a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/tipsandtricks/cortana.md +++ b/docs/endpointpolicymanager/components/fileassociationsmanager/knowledgebase/tipsandtricks/cortana.md @@ -18,7 +18,7 @@ How to solve it? You will need to install EdgeDeflector before you can send search queries from Cortana to the default browser, set through Endpoint Policy Manager software. More -info: [What is meant by "Default Browser" within Endpoint Policy Manager Browser router?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/defined.md) +info: [What is meant by "Default Browser" within Endpoint Policy Manager Browser router?](/docs/endpointpolicymanager/components/browserrouter/knowledgebase/tipsandtricks/defined.md) Then set the Policy for PPFAM as shown in the following screenshot: diff --git a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/tipsandtricks/specificbrowser.md b/docs/endpointpolicymanager/components/fileassociationsmanager/knowledgebase/tipsandtricks/specificbrowser.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/tipsandtricks/specificbrowser.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/knowledgebase/tipsandtricks/specificbrowser.md diff --git a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/tipsandtricks/windowsphotoviewer.md b/docs/endpointpolicymanager/components/fileassociationsmanager/knowledgebase/tipsandtricks/windowsphotoviewer.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/tipsandtricks/windowsphotoviewer.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/knowledgebase/tipsandtricks/windowsphotoviewer.md diff --git a/docs/endpointpolicymanager/components/fileassociationsmanager/knowledgebase/troubleshooting/_category_.json b/docs/endpointpolicymanager/components/fileassociationsmanager/knowledgebase/troubleshooting/_category_.json new file mode 100644 index 0000000000..2a7c1d7f13 --- /dev/null +++ b/docs/endpointpolicymanager/components/fileassociationsmanager/knowledgebase/troubleshooting/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Troubleshooting", + "position": 2, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/troubleshooting/defaultassociationsconfiguration.md b/docs/endpointpolicymanager/components/fileassociationsmanager/knowledgebase/troubleshooting/defaultassociationsconfiguration.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/troubleshooting/defaultassociationsconfiguration.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/knowledgebase/troubleshooting/defaultassociationsconfiguration.md diff --git a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/troubleshooting/defaultbrowser.md b/docs/endpointpolicymanager/components/fileassociationsmanager/knowledgebase/troubleshooting/defaultbrowser.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/troubleshooting/defaultbrowser.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/knowledgebase/troubleshooting/defaultbrowser.md diff --git a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/troubleshooting/gpos.md b/docs/endpointpolicymanager/components/fileassociationsmanager/knowledgebase/troubleshooting/gpos.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/troubleshooting/gpos.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/knowledgebase/troubleshooting/gpos.md diff --git a/docs/endpointpolicymanager/components/fileassociationsmanager/knowledgebase/troubleshooting/legacy.md b/docs/endpointpolicymanager/components/fileassociationsmanager/knowledgebase/troubleshooting/legacy.md new file mode 100644 index 0000000000..9a7233b17f --- /dev/null +++ b/docs/endpointpolicymanager/components/fileassociationsmanager/knowledgebase/troubleshooting/legacy.md @@ -0,0 +1,48 @@ +--- +title: "How do I revert to \"Legacy File Associations Methods & Features\" if directed (especially for LTSB/LTSC)?" +description: "How do I revert to \"Legacy File Associations Methods & Features\" if directed (especially for LTSB/LTSC)?" +sidebar_position: 50 +--- + +# How do I revert to "Legacy File Associations Methods & Features" if directed (especially for LTSB/LTSC)? + +If you are having a problem with Netwrix Endpoint Policy Manager (formerly PolicyPak) File +Associations Manager (PPFAM) not working as expected, you may be asked by tech support to "Revert to +Legacy File Assoc Method & Features". + +This might be required if you are attempting to use Endpoint Policy Manager File Associations +Manager on an older version of Windows 10, say, LTSB or LTSC. You can still get Endpoint Policy +Manager File Associations Manager to work, but you must utilize the Legacy behavior. + +First, be sure you are eligible to use this function by copying the latest Endpoint Policy Manager +ADMX files to your Central Store or using Endpoint Policy Manager Cloud. + +Directions for Central Store: +[Troubleshooting with ADMX files](/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/admxfiles.md) + +Directions for Endpoint Policy Manager Cloud (if they are not already pre-placed there): +[PolicyPak Cloud: Upload and use your own ADMX files to PolicyPak Cloud](/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/admxfiles.md) + +Then, the setting you should use if directed by support is entitled: + +`Computer Configuration | Policies | Admin Templates | PolicyPak ADMX Settings | Client-side Extensions | File Associations Manager | Revert to Legacy File Assoc Method & Features` +and set to Enabled to return back to the legacy behavior. + +![837_1_image-20201027212337-3](/images/endpointpolicymanager/troubleshooting/fileassociations/837_1_image-20201027212337-3.webp) + +## What does "Revert to Legacy File Assoc Method & Features" mean? + +By establishing to use Legacy File Assoc Method & Features the following occurs: + +- Endpoint Policy Manager File Associations Manager policies will ONLY apply on the COMPUTER side. + + :::note + The MMC and/or Cloud editors cannot know you've enabled this setting; and as such + those editors will still work, but the CSE will then ignore the USER side directives. + ::: + + +- Endpoint Policy Manager File Associations Manager policies can only take effect on DOMAIN JOINED + machines. +- Endpoint Policy Manager File Associations Manager policies can only take effect when you log out + and back in. diff --git a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/troubleshooting/oemdefaultassociations.md b/docs/endpointpolicymanager/components/fileassociationsmanager/knowledgebase/troubleshooting/oemdefaultassociations.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/troubleshooting/oemdefaultassociations.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/knowledgebase/troubleshooting/oemdefaultassociations.md diff --git a/docs/endpointpolicymanager/components/fileassociationsmanager/manual/_category_.json b/docs/endpointpolicymanager/components/fileassociationsmanager/manual/_category_.json new file mode 100644 index 0000000000..1c4c158a37 --- /dev/null +++ b/docs/endpointpolicymanager/components/fileassociationsmanager/manual/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Manual", + "position": 1, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/applymode.md b/docs/endpointpolicymanager/components/fileassociationsmanager/manual/applymode.md similarity index 93% rename from docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/applymode.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/manual/applymode.md index bfe384d365..f109f8a5dc 100644 --- a/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/applymode.md +++ b/docs/endpointpolicymanager/components/fileassociationsmanager/manual/applymode.md @@ -11,7 +11,7 @@ then drift from your configuration and choose their own application. :::note For a video on applying policies only once, see -[Endpoint Policy Manager File Associations Manager: Apply once (and drift)](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/gettingstarted/applyonce.md). +[Endpoint Policy Manager File Associations Manager: Apply once (and drift)](/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/gettingstarted/applyonce.md). ::: diff --git a/docs/endpointpolicymanager/components/fileassociationsmanager/manual/configuration/_category_.json b/docs/endpointpolicymanager/components/fileassociationsmanager/manual/configuration/_category_.json new file mode 100644 index 0000000000..f3e7bac34b --- /dev/null +++ b/docs/endpointpolicymanager/components/fileassociationsmanager/manual/configuration/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Configuration", + "position": 3, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/fileassociations/logs.md b/docs/endpointpolicymanager/components/fileassociationsmanager/manual/configuration/logs.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/fileassociations/logs.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/manual/configuration/logs.md diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/fileassociations/xmlfile.md b/docs/endpointpolicymanager/components/fileassociationsmanager/manual/configuration/xmlfile.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/fileassociations/xmlfile.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/manual/configuration/xmlfile.md diff --git a/docs/endpointpolicymanager/components/fileassociationsmanager/manual/gettingtoknow/_category_.json b/docs/endpointpolicymanager/components/fileassociationsmanager/manual/gettingtoknow/_category_.json new file mode 100644 index 0000000000..e327f602f8 --- /dev/null +++ b/docs/endpointpolicymanager/components/fileassociationsmanager/manual/gettingtoknow/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Getting to know File Associations Manager", + "position": 2, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/components/fileassociationsmanager/manual/helperutility.md b/docs/endpointpolicymanager/components/fileassociationsmanager/manual/helperutility.md new file mode 100644 index 0000000000..2f16270f09 --- /dev/null +++ b/docs/endpointpolicymanager/components/fileassociationsmanager/manual/helperutility.md @@ -0,0 +1,59 @@ +--- +title: "Using the Helper Utility" +description: "Using the Helper Utility" +sidebar_position: 90 +--- + +# Using the Helper Utility + +In the Netwrix Endpoint Policy Manager (formerly PolicyPak) File Associations Manager Quickstart +examples, we recommended that your management station have the same applications as your target +computers. However, that is not always practical. There are likely instances where you do not want +to install an application on your machine just for the sake of making a File Association. For +instance, someone in the Sales department may be the only one who has "Sales Application 123" +installed. + +That's where the Endpoint Policy Manager File Associations Manager Helper utility comes in. Run the +Endpoint Policy Manager File Associations Manager Helper on an example endpoint with the application +already installed and to which you want to make a policy association with later. + +:::note +For a video overview demonstrating how to use the Endpoint Policy Manager File +Associations Manager Helper utility, watch this video: +[Endpoint Policy Manager File Associations Manager: Helper Application](/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/tipsandtricks/helperapplication.md). +::: + + +The Endpoint Policy Manager File Associations Manager Helper is found in the Endpoint Policy Manager +ISO or ZIP download in the Endpoint Policy Manager Extras folder. + +![using_the_helper_utility](/images/endpointpolicymanager/fileassociations/using_the_helper_utility.webp) + +Follow these steps to setup the Endpoint Policy ManagerPolicyPak File Associations Manager Helper +utility: + +**Step 1 –** Launch the 11,000 kB EXE. When you do, the Endpoint Policy Manager File Associations +Manager Export wizard appears. + +![using_the_helper_utility_1](/images/endpointpolicymanager/fileassociations/using_the_helper_utility_1.webp) + +**Step 2 –** Find a particular file association that already exists on the machine, such as 3mf, and +the application it is already associated with. The application must be registered in order to see it +in the list. + +![using_the_helper_utility_2](/images/endpointpolicymanager/fileassociations/using_the_helper_utility_2.webp) + +**Step 3 –** Select **Include icons in the file (Can dramatically increase file size)**. This +setting is recommended even though the XML might be bigger. You must also choose to **Show file in +folder after finished** and **Open XML in Notepad when save is complete** for examination. + +![using_the_helper_utility_3](/images/endpointpolicymanager/fileassociations/using_the_helper_utility_3.webp) + +**Step 4 –** Take the exported file and import it into a Endpoint Policy Manager File Associations +Manager Group Policy Object (GPO). Note that the option to import from an XML is available when you +create a new entry and click **Select Program**. + +![using_the_helper_utility_4](/images/endpointpolicymanager/fileassociations/using_the_helper_utility_4.webp) + +To import the exported file into a Endpoint Policy Manager File Associations Manager GPO, pull up +the Select Program Association window, and then click on **From XML file** under Import. diff --git a/docs/endpointpolicymanager/components/fileassociationsmanager/manual/insouts/_category_.json b/docs/endpointpolicymanager/components/fileassociationsmanager/manual/insouts/_category_.json new file mode 100644 index 0000000000..c013e145db --- /dev/null +++ b/docs/endpointpolicymanager/components/fileassociationsmanager/manual/insouts/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Ins and Outs", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/insouts/advantages.md b/docs/endpointpolicymanager/components/fileassociationsmanager/manual/insouts/advantages.md similarity index 95% rename from docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/insouts/advantages.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/manual/insouts/advantages.md index 67cfb1c62a..5002b1677d 100644 --- a/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/insouts/advantages.md +++ b/docs/endpointpolicymanager/components/fileassociationsmanager/manual/insouts/advantages.md @@ -47,7 +47,7 @@ Group Policy update. :::note For a video demonstrating how neither Endpoint Policy Manager File Associations Manager nor Microsoft's method can affect a user until the second login, see the -[Endpoint Policy Manager File Associations Manager: Understanding the First Login](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/tipsandtricks/firstlogin.md) +[Endpoint Policy Manager File Associations Manager: Understanding the First Login](/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/tipsandtricks/firstlogin.md) topic for additional information.. ::: diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/insouts/overview.md b/docs/endpointpolicymanager/components/fileassociationsmanager/manual/insouts/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/insouts/overview.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/manual/insouts/overview.md diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/insouts/windows10.md b/docs/endpointpolicymanager/components/fileassociationsmanager/manual/insouts/windows10.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/insouts/windows10.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/manual/insouts/windows10.md diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/insouts/windows7.md b/docs/endpointpolicymanager/components/fileassociationsmanager/manual/insouts/windows7.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/insouts/windows7.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/manual/insouts/windows7.md diff --git a/docs/endpointpolicymanager/components/fileassociationsmanager/manual/itemleveltargeting/_category_.json b/docs/endpointpolicymanager/components/fileassociationsmanager/manual/itemleveltargeting/_category_.json new file mode 100644 index 0000000000..649a1baa7a --- /dev/null +++ b/docs/endpointpolicymanager/components/fileassociationsmanager/manual/itemleveltargeting/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Using Item-Level Targeting with Collections and Policies", + "position": 70, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/itemleveltargeting/exportcollection.md b/docs/endpointpolicymanager/components/fileassociationsmanager/manual/itemleveltargeting/exportcollection.md similarity index 89% rename from docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/itemleveltargeting/exportcollection.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/manual/itemleveltargeting/exportcollection.md index 89f459451c..b857a5d011 100644 --- a/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/itemleveltargeting/exportcollection.md +++ b/docs/endpointpolicymanager/components/fileassociationsmanager/manual/itemleveltargeting/exportcollection.md @@ -6,7 +6,7 @@ sidebar_position: 20 # Exporting Collections -[Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/uemtools.md) explains how to use +[Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/uemtools.md) explains how to use the Endpoint Policy Manager Exporter to wrap up any Endpoint Policy Manager directives and deliver them using Microsoft Endpoint Manager (SCCM and Intune), KACE, you own MDM service, or Endpoint Policy Manager Cloud. However, we recommend NOT using Endpoint Policy Manager File Associations @@ -22,7 +22,7 @@ using Endpoint Policy Manager Cloud. :::note For a video demonstrating the use of Endpoint Policy Manager Cloud with domain-joined machines. See the -[Endpoint Policy ManagerCloud and Endpoint Policy Manager OnPremise – Together using PPCloud Licenses](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/usingwithothermethods/onpremise.md) +[Endpoint Policy ManagerCloud and Endpoint Policy Manager OnPremise – Together using PPCloud Licenses](/docs/endpointpolicymanager/deliverymethods/cloud/videos/usingwithothermethods/onpremise.md) topic for additional information. ::: @@ -33,7 +33,7 @@ Cloud, right-click the collection or the policy, and select **Export to XML**. :::note For a video showing how to export policies and how to use Endpoint Policy Manager Exporter.See the -[Deploying Endpoint Policy Managerdirectives without Group Policy (Endpoint Policy Manager Exporter Utility)](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/exportingtips/exporterutility.md) +[Deploying Endpoint Policy Managerdirectives without Group Policy (Endpoint Policy Manager Exporter Utility)](/docs/endpointpolicymanager/deliverymethods/mdm/videos/exportingtips/exporterutility.md) topic for additional information. ::: diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/itemleveltargeting/overview.md b/docs/endpointpolicymanager/components/fileassociationsmanager/manual/itemleveltargeting/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/itemleveltargeting/overview.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/manual/itemleveltargeting/overview.md diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/itemleveltargeting/processorderprecedence.md b/docs/endpointpolicymanager/components/fileassociationsmanager/manual/itemleveltargeting/processorderprecedence.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/itemleveltargeting/processorderprecedence.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/manual/itemleveltargeting/processorderprecedence.md diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/mapextensions.md b/docs/endpointpolicymanager/components/fileassociationsmanager/manual/mapextensions.md similarity index 97% rename from docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/mapextensions.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/manual/mapextensions.md index 2c57972a25..22993a5feb 100644 --- a/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/mapextensions.md +++ b/docs/endpointpolicymanager/components/fileassociationsmanager/manual/mapextensions.md @@ -8,7 +8,7 @@ sidebar_position: 30 :::note For some video overviews of Endpoint Policy Manager File Associations Manager, see the -[Endpoint Policy Manager Cloud: Managing File Assocations](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/methods/cloud.md) topic +[Endpoint Policy Manager Cloud: Managing File Assocations](/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/methods/cloud.md) topic for additional information. ::: diff --git a/docs/endpointpolicymanager/components/fileassociationsmanager/manual/overview.md b/docs/endpointpolicymanager/components/fileassociationsmanager/manual/overview.md new file mode 100644 index 0000000000..b5fb91b692 --- /dev/null +++ b/docs/endpointpolicymanager/components/fileassociationsmanager/manual/overview.md @@ -0,0 +1,88 @@ +--- +title: "File Associations Manager" +description: "File Associations Manager" +sidebar_position: 10 +--- + +# File Associations Manager + +:::warning +Even though Endpoint Policy Manager MDM and Endpoint Policy Manager Cloud can deliver a +wide variety of Endpoint Policy Manager and Group Policy settings to non-domain-joined machines, +neither the in-box Microsoft method, nor Endpoint Policy Manager File Associations Manager, can +configure machines unless the machine is domain-joined. +::: + + +This is a self-imposed limitation by Microsoft on this Windows 10 feature. + +## About File Associations Manager + +:::note +Before reading this section, please ensure you have read +[Installation Quick Start](/docs/endpointpolicymanager/gettingstarted/overviewinstall/overviewinstall.md), which will help you +learn to do the following: +::: + + +- Install the Admin MSI on your GPMC machine +- Install the CSE on a test Windows machine +- Set up a computer in Trial mode or Licensed mode +- Set up a common OU structure + +Optionally, if you don't want to use Group Policy, read the section on Advanced Concepts on Group +Policy and non–Group Policy methods (MEMCM, KACE, and MDM service or Netwrix Endpoint Policy Manager +(formerly PolicyPak) Cloud), located in the +[Endpoint Privilege Manager Implementation QuickStart Guide](/docs/endpointpolicymanager/components/endpointprivilegemanager/technotes/implementationguide.md) +to deploy your directives. + +Endpoint Policy Manager File Associations Manager enables you to perform the following operations in +Windows 10: + +- Set up file associations for extensions such as .pdf with Acrobat Reader or FoxIT Pro Reader, or + .zip with WinZip or 7-Zip +- Set up protocol associations like MAILTO: or FTP: to specific applications +- Map an entire category of Windows 10 items +- Map a file extension to a Windows 10 "universal" application, such as Universal Windows Platform + (UWP)/Metro applications + +:::note +For an overview of Endpoint Policy Manager File Associations Manager, see +[https://www.endpointpolicymanager.com/products/endpointpolicymanager-file-associations-manager.html](https://www.endpointpolicymanager.com/products/endpointpolicymanager-file-associations-manager.html). +::: + + +The basic way to use Endpoint Policy Manager File Associations Manager is as follows: + +- Create rules to express which file extensions should launch which applications. +- Export the Endpoint Policy Manager File Associations Manager rules and deliver them using: + + - Microsoft Endpoint Manager (SCCM and Intune) or your own on-prem systems management software + - A mobile device management (MDM) service + - Endpoint Policy Manager Cloud service + +- Allow the client machine with the Endpoint Policy Manager client-side extension (CSE) to embrace + the directives and perform the work. + +:::note +If you use the Endpoint Policy Manager Cloud service, you can even deliver Group Policy +settings to non-domain-joined machines over the Internet. +::: + + +## Moving Parts + +- A management station: The Endpoint Policy Manager Admin Console MSI must be installed on the + management station where you create Group Policy Objects (GPOs). Once installed, you'll see the + Endpoint Policy Manager | Endpoint Policy Manager File Associations Manager node. +- The Endpoint Policy Manager CSE: This runs on the client (target) machine and is the same CSE for + all Endpoint Policy Manager products. There isn't anything separate to install, and the Endpoint + Policy Manager CSE must be present in order to accept Endpoint Policy Manager File Associations + Manager directives via Group Policy, or when using Microsoft Endpoint Manager (SCCM and Intune), + KACE, MDM, or similar utilities. +- Endpoints: In order to use these, they must be licensed for Endpoint Policy Manager File + Associations Manager using one of the licensing methods. +- The Endpoint Policy Manager Exporter (optional): A free utility that lets you take Endpoint Policy + Manager Admin Templates Manager and our other products' XML files and wrap them into a "portable" + MSI file for deployment using Microsoft Endpoint Manager (SCCM and Intune), an MDM service, or + your own systems management software. diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/policies.md b/docs/endpointpolicymanager/components/fileassociationsmanager/manual/policies.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/policies.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/manual/policies.md diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/preconfigured.md b/docs/endpointpolicymanager/components/fileassociationsmanager/manual/preconfigured.md similarity index 96% rename from docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/preconfigured.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/manual/preconfigured.md index f24591d79d..0a8b5cdc63 100644 --- a/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/preconfigured.md +++ b/docs/endpointpolicymanager/components/fileassociationsmanager/manual/preconfigured.md @@ -14,7 +14,7 @@ usual settings). :::note For a video overview demonstrating how to use preconfigured Endpoint Policy Manager File Associations Manager items, see -[Endpoint Policy Manager File Associations Manager: Use our preconfigured advice](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/gettingstarted/preconfiguredadvice.md) +[Endpoint Policy Manager File Associations Manager: Use our preconfigured advice](/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/gettingstarted/preconfiguredadvice.md) topic for additional information. ::: diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/productwizard.md b/docs/endpointpolicymanager/components/fileassociationsmanager/manual/productwizard.md similarity index 93% rename from docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/productwizard.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/manual/productwizard.md index 37b482a2b1..f250fd1c16 100644 --- a/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/productwizard.md +++ b/docs/endpointpolicymanager/components/fileassociationsmanager/manual/productwizard.md @@ -13,7 +13,7 @@ Policies for Product wizard. :::note For more information on the Add Policies for Product wizard, see the -[Manage all File Associations with the PPFAM Wizard](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/gettingstarted/wizard.md) topic for +[Manage all File Associations with the PPFAM Wizard](/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/gettingstarted/wizard.md) topic for additional information.. ::: diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/registeredextensions.md b/docs/endpointpolicymanager/components/fileassociationsmanager/manual/registeredextensions.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/registeredextensions.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/manual/registeredextensions.md diff --git a/docs/endpointpolicymanager/components/fileassociationsmanager/overview.md b/docs/endpointpolicymanager/components/fileassociationsmanager/overview.md new file mode 100644 index 0000000000..43760c7aab --- /dev/null +++ b/docs/endpointpolicymanager/components/fileassociationsmanager/overview.md @@ -0,0 +1,28 @@ +--- +title: File Associations Manager Overview +description: File Associations Manager controls which applications open specific file types +--- + +# File Associations Manager + +File Associations Manager is a component of Endpoint Policy Manager (PolicyPak) that allows administrators to control which applications open specific file types and protocols. This ensures consistent user experience and proper application usage across your organization. + +## Key Features + +- **File Type Control**: Define which applications open specific file extensions +- **Protocol Management**: Control URL protocol handlers (http, https, mailto, etc.) +- **Default Application Management**: Set organization-wide default applications +- **User Override Control**: Allow or prevent users from changing associations +- **Comprehensive Logging**: Track association changes and usage + +## Documentation Sections + +- [Manual](manual/) - Configuration guides and reference documentation +- [Videos](videolearningcenter/) - Video tutorials and demonstrations +- [Tech Notes](knowledgebase/) - Troubleshooting and technical guidance + +## Quick Links + +- [Configuration Guide](manual/configuration) +- [Getting Started Videos](videolearningcenter/gettingstarted) +- [Troubleshooting](knowledgebase/troubleshooting) diff --git a/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/_category_.json b/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/_category_.json new file mode 100644 index 0000000000..08b2b0a69c --- /dev/null +++ b/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Videos", + "position": 2, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "videolearningcenter" + } +} diff --git a/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/gettingstarted/_category_.json b/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/gettingstarted/_category_.json new file mode 100644 index 0000000000..edb57b5129 --- /dev/null +++ b/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/gettingstarted/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Getting Started", + "position": 1, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/gettingstarted/applyonce.md b/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/gettingstarted/applyonce.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/gettingstarted/applyonce.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/gettingstarted/applyonce.md diff --git a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/gettingstarted/preconfiguredadvice.md b/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/gettingstarted/preconfiguredadvice.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/gettingstarted/preconfiguredadvice.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/gettingstarted/preconfiguredadvice.md diff --git a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/gettingstarted/universalwindowsapps.md b/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/gettingstarted/universalwindowsapps.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/gettingstarted/universalwindowsapps.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/gettingstarted/universalwindowsapps.md diff --git a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/gettingstarted/windows10.md b/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/gettingstarted/windows10.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/gettingstarted/windows10.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/gettingstarted/windows10.md diff --git a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/gettingstarted/wizard.md b/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/gettingstarted/wizard.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/gettingstarted/wizard.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/gettingstarted/wizard.md diff --git a/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/methods/_category_.json b/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/methods/_category_.json new file mode 100644 index 0000000000..bf3482899d --- /dev/null +++ b/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/methods/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Methods: Cloud, MDM and SCCM", + "position": 2, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/methods/cloud.md b/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/methods/cloud.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/methods/cloud.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/methods/cloud.md diff --git a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/methods/cloudusage.md b/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/methods/cloudusage.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/methods/cloudusage.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/methods/cloudusage.md diff --git a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/methods/mdm.md b/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/methods/mdm.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/methods/mdm.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/methods/mdm.md diff --git a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/methods/pdqdeploy.md b/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/methods/pdqdeploy.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/methods/pdqdeploy.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/methods/pdqdeploy.md diff --git a/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/tipsandtricks/_category_.json b/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/tipsandtricks/_category_.json new file mode 100644 index 0000000000..a74978754e --- /dev/null +++ b/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/tipsandtricks/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Tips and Tricks", + "position": 3, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/tipsandtricks/acroreader.md b/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/tipsandtricks/acroreader.md similarity index 98% rename from docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/tipsandtricks/acroreader.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/tipsandtricks/acroreader.md index 0c68f4db93..eb91891469 100644 --- a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/tipsandtricks/acroreader.md +++ b/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/tipsandtricks/acroreader.md @@ -160,7 +160,7 @@ just prove that real fast. Let's go ahead and "Sign out." When we log back on, a interesting should happen. That's the whole point. It should just keep on working. There we go. Just to lay it out one more time, using Endpoint Policy Manager -for [Endpoint Policy Manager File Associations Manager: Manage Windows 10 & 11 File Associations](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/gettingstarted/windows10.md) with +for [Endpoint Policy Manager File Associations Manager: Manage Windows 10 & 11 File Associations](/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/gettingstarted/windows10.md) with collections, the collections have the brains. The brains are you're going to use "Change Item Level Targeting" and say do the stuff in the collection when I see the application I want to manage. For instance, this one is Acrobat Reader. This one is Acrobat Writer. Once you have that, you've diff --git a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/tipsandtricks/adobereader.md b/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/tipsandtricks/adobereader.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/tipsandtricks/adobereader.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/tipsandtricks/adobereader.md diff --git a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/tipsandtricks/firstlogin.md b/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/tipsandtricks/firstlogin.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/tipsandtricks/firstlogin.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/tipsandtricks/firstlogin.md diff --git a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/tipsandtricks/helperapplication.md b/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/tipsandtricks/helperapplication.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/tipsandtricks/helperapplication.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/tipsandtricks/helperapplication.md diff --git a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/tipsandtricks/helpertool.md b/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/tipsandtricks/helpertool.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/tipsandtricks/helpertool.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/tipsandtricks/helpertool.md diff --git a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/tipsandtricks/mailto.md b/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/tipsandtricks/mailto.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/tipsandtricks/mailto.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/tipsandtricks/mailto.md diff --git a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/tipsandtricks/windows10modify.md b/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/tipsandtricks/windows10modify.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/tipsandtricks/windows10modify.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/tipsandtricks/windows10modify.md diff --git a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/tipsandtricks/windows10questions.md b/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/tipsandtricks/windows10questions.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/tipsandtricks/windows10questions.md rename to docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/tipsandtricks/windows10questions.md diff --git a/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/videolearningcenter.md b/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/videolearningcenter.md new file mode 100644 index 0000000000..257dd492d9 --- /dev/null +++ b/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/videolearningcenter.md @@ -0,0 +1,29 @@ +--- +title: File Associations Manager Videos +description: Video tutorials for File Associations Manager +--- + +# File Associations Manager Video Learning Center + +Learn File Associations Manager through comprehensive video tutorials covering setup, configuration, and best practices. + +## Video Categories + +- [Getting Started](gettingstarted) - Basic concepts and initial setup +- [Methods: Cloud, MDM and SCCM](methods) - Deployment and management methods +- [Tips and Tricks](tipsandtricks) - Advanced techniques and best practices + +## Featured Topics + +### Getting Started +Perfect for administrators new to File Associations Manager who want to understand the fundamentals and see it in action. + +### Deployment Methods +Learn how to deploy and manage File Associations Manager using different enterprise methods including Cloud, MDM, and SCCM. + +### Advanced Techniques +Discover tips, tricks, and advanced configurations to maximize the effectiveness of File Associations Manager. + +--- + +*All videos include step-by-step guidance and real-world examples.* diff --git a/docs/endpointpolicymanager/components/javaenterpriserules/_category_.json b/docs/endpointpolicymanager/components/javaenterpriserules/_category_.json new file mode 100644 index 0000000000..c17f2559c5 --- /dev/null +++ b/docs/endpointpolicymanager/components/javaenterpriserules/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Java Enterprise Rules Manager", + "position": 8, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/javaenterpriserules/manual/_category_.json b/docs/endpointpolicymanager/components/javaenterpriserules/manual/_category_.json new file mode 100644 index 0000000000..872eac79bd --- /dev/null +++ b/docs/endpointpolicymanager/components/javaenterpriserules/manual/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Manual", + "position": 1, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/javaenterpriserules/manual/gettingstarted.md b/docs/endpointpolicymanager/components/javaenterpriserules/manual/gettingstarted.md new file mode 100644 index 0000000000..a1e782be35 --- /dev/null +++ b/docs/endpointpolicymanager/components/javaenterpriserules/manual/gettingstarted.md @@ -0,0 +1,125 @@ +--- +title: "Quick Start" +description: "Quick Start" +sidebar_position: 20 +--- + +# Quick Start + +:::note +Watch this video for an overview of Java Rules Manager: See +[Use Endpoint Policy Manager Cloud to choose which version of Java for what website](/docs/endpointpolicymanager/components/javaenterpriserules/videos/methods/cloud.md) +Netwrix Endpoint Policy Manager (formerly PolicyPak). +::: + + +Endpoint Policy Manager Java Rules Manager editor is within the Endpoint Policy Manager node. +Endpoint Policy Manager Java Rules Manager enables you to create a new Endpoint Policy Manager Java +Rules Manager policy or collection. + +:::note +You will only see the Java Rules Manager node when you have the latest Endpoint Policy +Manager Admin Console MSI installed on your management station. +::: + + +![quickstart_policypak_java](/images/endpointpolicymanager/javaenterpriserules/quickstart_endpointpolicymanager_java.webp) + +Endpoint Policy Manager Java Rules Manager rules can only be created on the Computer side. If you +attempt to use the user-side configuration node, you will receive a message explaining that you need +to use the Computer side. This is because Endpoint Policy Manager Java Rules Manager rules affect +the system and all users on the machine. In other words, all users must honor the Endpoint Policy +Manager Java Rules Manager rule set, even though it can be filtered by using Item-Level Targeting +(explained later). + +Endpoint Policy Manager Java Rules Manager policies can use collections. If you want to keep things +organized, you can create a collectioni Endpoint Policy Manager and then put Java Rules policies (or +other collections) inside the collection. + +![quickstart_policypak_java_1](/images/endpointpolicymanager/javaenterpriserules/quickstart_endpointpolicymanager_java_1.webp) + +![quickstart_policypak_java_2](/images/endpointpolicymanager/javaenterpriserules/quickstart_endpointpolicymanager_java_2.webp) + +Endpoint Policy Manager Java Rules Manager has a precedence order. This happens if you decide to +have multiple policies, collections, and Group Policy Objects (GPOs), or if you choose to use +something other than Group Policy to deliver settings. + +**Step 1 –** For the Quickstart, we recommend creating a collection on the Computer side. Within +that collection, create a new Endpoint Policy Manager Java Rules Manager policy, such as the one +shown below. In this example, we are making a rule for [https://java.com ](https://java.com)by using +Java 7 U 51. (Note that this is https, notjust http). + +![quickstart_policypak_java_3](/images/endpointpolicymanager/javaenterpriserules/quickstart_endpointpolicymanager_java_3.webp) + +**Step 2 –** Once you click **OK** you will receive an entry similar to the one shown below. + +![quickstart_policypak_java_4](/images/endpointpolicymanager/javaenterpriserules/quickstart_endpointpolicymanager_java_4.webp) + +**Step 3 –** If you would like to follow along with this Quickstart, create two more Endpoint Policy +Manager Java Rules Manager policies in the same collection. The next one will make a rule so that +[http://javatester.org ](http://javatester.org)will run with Java 8 U 25. (Note that this URL is +http, nothttps). + +![quickstart_policypak_java_5](/images/endpointpolicymanager/javaenterpriserules/quickstart_endpointpolicymanager_java_5.webp) + +**Step 4 –** Click **OK** to save the entry.. + +**Step 5 –** Create another policy that will block `https://*.nasa.gov/`.Note that this URL is +https. + +![quickstart_policypak_java_6](/images/endpointpolicymanager/javaenterpriserules/quickstart_endpointpolicymanager_java_6.webp) + +**Step 6 –** When complete, your entries will look like this:. + +![quickstart_policypak_java_7](/images/endpointpolicymanager/javaenterpriserules/quickstart_endpointpolicymanager_java_7.webp) + +Here is what each column in the above figure means: + +- Policy Name — This is the name you gave the policy. Default browser is always named Default + Browser. +- Manage Type — The method to perform the mapping of the Java applet to the version of Java you want + to use (explained in more detail later). +- Rule — In this example, this is the location/URL you chose to manage. +- Enabled (True/False) — A policy entry can be enabled, which means it will go to work. If you need + to temporarily stop a policy entry from applying, you can disable it (set it to False). +- Item-Level Targeting (No/Yes) — We will describe this column later on in the section + [Using Item-Level Targeting with Collections and Policies](/docs/endpointpolicymanager/components/javaenterpriserules/manual/usage/itemleveltargeting.md). +- Comment — Any entry can have a comment option, which is used to explain why you made the decision. + +**Step 7 –** On the endpoint, reboot the computer or run GPupdate so the GPO with the policies that +affect the computer will apply. + +:::note +Logging in as a test user will not work in this case since these Endpoint Policy Manager +entries are on the Computer side and are only processed when the computer is updated (at reboot or +GPupdate). +::: + + +**Step 8 –** Now try out Endpoint Policy Manager Java Rules Manager by doing the following: + +- Open Internet Explorer and visit [java.com](http://www.java.com/). Next, click **Do I have Java?** + Instead of showing the latest version of Java installed on your machine, you should see that you + have Java 7 U 51. +- Open Firefox and visit [www.javatester.org](http://www.javatester.org/). Then click **Test this + version of Java**. You should see Java 1.8.0_25, that is, Java 8 U 25. + +![quickstart_policypak_java_8](/images/endpointpolicymanager/javaenterpriserules/quickstart_endpointpolicymanager_java_8.webp) + +**Step 9 –** On either browser, visit +[https://atcsim.arc.nasa.gov/version/index.html](https://atcsim.arc.nasa.gov/version/index.html). +When you visit the NASA website, you will receive a prompt warning you that the web certificate is +out of date and will be received (which is not related to Java). Continue to run the applet. The +result is shown below. + +![quickstart_policypak_java_9](/images/endpointpolicymanager/javaenterpriserules/quickstart_endpointpolicymanager_java_9.webp) + +**Step 10 –** Click **OK**. Next, click the **Error: Click for details** message. When you do this, +another message will pop-up. + +![quickstart_policypak_java_10](/images/endpointpolicymanager/javaenterpriserules/quickstart_endpointpolicymanager_java_10.webp) + +This ends the Endpoint Policy Manager Java Rules Manager Quickstart, which demonstrated the power of +Endpoint Policy Manager Java Enterprise Rules Manager in the fastest amount of time. Note that +prompts for various Java-related items might be received during your Quickstart. To overcome this, +please see section on [Overcoming Java Prompts](/docs/endpointpolicymanager/components/javaenterpriserules/manual/prompts/overview.md). diff --git a/docs/endpointpolicymanager/components/javaenterpriserules/manual/javaenterpriserules/_category_.json b/docs/endpointpolicymanager/components/javaenterpriserules/manual/javaenterpriserules/_category_.json new file mode 100644 index 0000000000..10bdcb77e3 --- /dev/null +++ b/docs/endpointpolicymanager/components/javaenterpriserules/manual/javaenterpriserules/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Troubleshooting", + "position": 40, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/javaenterpriserules/deploymentruleset.md b/docs/endpointpolicymanager/components/javaenterpriserules/manual/javaenterpriserules/deploymentruleset.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/javaenterpriserules/deploymentruleset.md rename to docs/endpointpolicymanager/components/javaenterpriserules/manual/javaenterpriserules/deploymentruleset.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/javaenterpriserules/eventviewer.md b/docs/endpointpolicymanager/components/javaenterpriserules/manual/javaenterpriserules/eventviewer.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/javaenterpriserules/eventviewer.md rename to docs/endpointpolicymanager/components/javaenterpriserules/manual/javaenterpriserules/eventviewer.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/javaenterpriserules/itemleveltargeting.md b/docs/endpointpolicymanager/components/javaenterpriserules/manual/javaenterpriserules/itemleveltargeting.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/javaenterpriserules/itemleveltargeting.md rename to docs/endpointpolicymanager/components/javaenterpriserules/manual/javaenterpriserules/itemleveltargeting.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/javaenterpriserules/licensefile.md b/docs/endpointpolicymanager/components/javaenterpriserules/manual/javaenterpriserules/licensefile.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/javaenterpriserules/licensefile.md rename to docs/endpointpolicymanager/components/javaenterpriserules/manual/javaenterpriserules/licensefile.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/javaenterpriserules/logfiles.md b/docs/endpointpolicymanager/components/javaenterpriserules/manual/javaenterpriserules/logfiles.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/javaenterpriserules/logfiles.md rename to docs/endpointpolicymanager/components/javaenterpriserules/manual/javaenterpriserules/logfiles.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/javaenterpriserules/overview.md b/docs/endpointpolicymanager/components/javaenterpriserules/manual/javaenterpriserules/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/javaenterpriserules/overview.md rename to docs/endpointpolicymanager/components/javaenterpriserules/manual/javaenterpriserules/overview.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/javaenterpriserules/processorder.md b/docs/endpointpolicymanager/components/javaenterpriserules/manual/javaenterpriserules/processorder.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/javaenterpriserules/processorder.md rename to docs/endpointpolicymanager/components/javaenterpriserules/manual/javaenterpriserules/processorder.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/javaenterpriserules/version.md b/docs/endpointpolicymanager/components/javaenterpriserules/manual/javaenterpriserules/version.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/javaenterpriserules/version.md rename to docs/endpointpolicymanager/components/javaenterpriserules/manual/javaenterpriserules/version.md diff --git a/docs/endpointpolicymanager/components/javaenterpriserules/manual/prompts/_category_.json b/docs/endpointpolicymanager/components/javaenterpriserules/manual/prompts/_category_.json new file mode 100644 index 0000000000..907145e942 --- /dev/null +++ b/docs/endpointpolicymanager/components/javaenterpriserules/manual/prompts/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Overcoming Java Prompts", + "position": 50, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/prompts/firefox.md b/docs/endpointpolicymanager/components/javaenterpriserules/manual/prompts/firefox.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/prompts/firefox.md rename to docs/endpointpolicymanager/components/javaenterpriserules/manual/prompts/firefox.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/prompts/firefoxinternetexplorer.md b/docs/endpointpolicymanager/components/javaenterpriserules/manual/prompts/firefoxinternetexplorer.md similarity index 94% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/prompts/firefoxinternetexplorer.md rename to docs/endpointpolicymanager/components/javaenterpriserules/manual/prompts/firefoxinternetexplorer.md index 99afc00e53..5a48757f31 100644 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/prompts/firefoxinternetexplorer.md +++ b/docs/endpointpolicymanager/components/javaenterpriserules/manual/prompts/firefoxinternetexplorer.md @@ -17,7 +17,7 @@ Application Settings Manager Java AppSets. Starting with Java 7 U 25 they all ha :::note See -[Manage and Lock down Java Site List Exceptions](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/java/lockdown.md) +[Manage and Lock down Java Site List Exceptions](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/java/lockdown.md) for additional information. ::: diff --git a/docs/endpointpolicymanager/components/javaenterpriserules/manual/prompts/internetexplorer/_category_.json b/docs/endpointpolicymanager/components/javaenterpriserules/manual/prompts/internetexplorer/_category_.json new file mode 100644 index 0000000000..9d1912f85a --- /dev/null +++ b/docs/endpointpolicymanager/components/javaenterpriserules/manual/prompts/internetexplorer/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Type 3: Java Messages for Internet Explorer", + "position": 30, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/prompts/internetexplorer/message1.md b/docs/endpointpolicymanager/components/javaenterpriserules/manual/prompts/internetexplorer/message1.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/prompts/internetexplorer/message1.md rename to docs/endpointpolicymanager/components/javaenterpriserules/manual/prompts/internetexplorer/message1.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/prompts/internetexplorer/message2.md b/docs/endpointpolicymanager/components/javaenterpriserules/manual/prompts/internetexplorer/message2.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/prompts/internetexplorer/message2.md rename to docs/endpointpolicymanager/components/javaenterpriserules/manual/prompts/internetexplorer/message2.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/prompts/internetexplorer/message3.md b/docs/endpointpolicymanager/components/javaenterpriserules/manual/prompts/internetexplorer/message3.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/prompts/internetexplorer/message3.md rename to docs/endpointpolicymanager/components/javaenterpriserules/manual/prompts/internetexplorer/message3.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/prompts/internetexplorer/overview.md b/docs/endpointpolicymanager/components/javaenterpriserules/manual/prompts/internetexplorer/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/prompts/internetexplorer/overview.md rename to docs/endpointpolicymanager/components/javaenterpriserules/manual/prompts/internetexplorer/overview.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/prompts/overview.md b/docs/endpointpolicymanager/components/javaenterpriserules/manual/prompts/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/prompts/overview.md rename to docs/endpointpolicymanager/components/javaenterpriserules/manual/prompts/overview.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/theory.md b/docs/endpointpolicymanager/components/javaenterpriserules/manual/theory.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/theory.md rename to docs/endpointpolicymanager/components/javaenterpriserules/manual/theory.md diff --git a/docs/endpointpolicymanager/components/javaenterpriserules/manual/usage/_category_.json b/docs/endpointpolicymanager/components/javaenterpriserules/manual/usage/_category_.json new file mode 100644 index 0000000000..7599c89372 --- /dev/null +++ b/docs/endpointpolicymanager/components/javaenterpriserules/manual/usage/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Using Java Rules Manager", + "position": 30, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "usage" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/usage/exportcollections.md b/docs/endpointpolicymanager/components/javaenterpriserules/manual/usage/exportcollections.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/usage/exportcollections.md rename to docs/endpointpolicymanager/components/javaenterpriserules/manual/usage/exportcollections.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/usage/itemleveltargeting.md b/docs/endpointpolicymanager/components/javaenterpriserules/manual/usage/itemleveltargeting.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/usage/itemleveltargeting.md rename to docs/endpointpolicymanager/components/javaenterpriserules/manual/usage/itemleveltargeting.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/usage/manageria.md b/docs/endpointpolicymanager/components/javaenterpriserules/manual/usage/manageria.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/usage/manageria.md rename to docs/endpointpolicymanager/components/javaenterpriserules/manual/usage/manageria.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/usage/processorderprecedence.md b/docs/endpointpolicymanager/components/javaenterpriserules/manual/usage/processorderprecedence.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/usage/processorderprecedence.md rename to docs/endpointpolicymanager/components/javaenterpriserules/manual/usage/processorderprecedence.md diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/usage/usage.md b/docs/endpointpolicymanager/components/javaenterpriserules/manual/usage/usage.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/usage/usage.md rename to docs/endpointpolicymanager/components/javaenterpriserules/manual/usage/usage.md diff --git a/docs/endpointpolicymanager/components/javaenterpriserules/overview.md b/docs/endpointpolicymanager/components/javaenterpriserules/overview.md new file mode 100644 index 0000000000..4d39ef3e5a --- /dev/null +++ b/docs/endpointpolicymanager/components/javaenterpriserules/overview.md @@ -0,0 +1,94 @@ +--- +title: "Java Enterprise Rules Manager" +description: "Java Enterprise Rules Manager" +sidebar_position: 30 +--- + +# Java Enterprise Rules Manager + +:::note +Before reading this section, please ensure you have read Book 2: +[Installation Quick Start](/docs/endpointpolicymanager/gettingstarted/overviewinstall/overviewinstall.md), which will help you +learn to do the following: +::: + + +- Install the Admin MSI on your GPMC machine +- Install the CSE on a test Windows machine +- Set up a computer in Trial mode or Licensed mode +- Set up a common OU structure + +Optionally, if you don't want to use Group Policy, read the section in Appendix A: +[Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/uemtools.md) to deploy your +directives. + +The goals of Netwrix Endpoint Policy Manager (formerly PolicyPak) Java Rules Manager are as follows: + +- Dictate specific versions of Java that should be utilized by specific Java applets (usually housed + within specific webpages). +- Reduce or eliminate prompts to end users about Java. +- Continue to run unknown or unnamed Java applets with the most secure version of Java. + +Java Rules Manager enables you to map the version of Java you want to use in individual +circumstances. It is the fastest way to implement Oracle's Java Deployment Rule Set feature (which +will be explained later). PolicyPak is not reinventing the wheel or tricking Java. Instead, it works +alongside Oracle's sanctioned method for the mapping of Java versions to Java applets. + +:::note +See this video +[Use Endpoint Policy Manager Cloud to choose which version of Java for what website](/docs/endpointpolicymanager/components/javaenterpriserules/videos/methods/cloud.md) for +an overview of Endpoint Policy Manager Java Rules Manager. +::: + + +For instance, you might want to ensure that the following policies are running on your machine: + +- Use Java 7 U 51 for when end users go to www.internal.com/app1. +- Use Java 8 U 25 for when end users go to www.internal.com/app2. +- Block specific Java applets from running in specific websites. +- Use the latest version of Java for all other sites and circumstances. + +PolicyPak Java Rules Manager enables you to perform the following functions: + +- Assemble settings (policies) into collections. +- Set Item-Level Targeting on policies and collections. +- Deliver policies to the Computer side (without Group Policy Loopback mode). +- Create exact criteria for when specific Java versions should open in a browser. +- Export policies or collections as XML files for use with PolicyPak Exporter and PolicyPak Cloud. + See [Exporting Collections](/docs/endpointpolicymanager/components/javaenterpriserules/manual/usage/exportcollections.md) for additional information. +- Set custom messages when blocking a Java applet. + +To use the Quickstart for PolicyPak Java Rules Manager, we recommend you have one endpoint (Windows +7 or later) configured with the following browsers and Java versions: + +- Internet Explorer 11 +- Firefox (latest ESR version still supports Java) +- Chrome (latest) +- Java 7 (our examples will use Java 7 U 51) +- Java 8 (our examples will use Java 8 U 25) +- The latest version of Java (Java 8 U 111 as of this manual's publication) + +It is recommended that you test the endpoint (Windows 7 or later) with all these versions of Java, +as well as Internet Explorer, Firefox, and Chrome. + +![about_policypak_java_rules](/images/endpointpolicymanager/javaenterpriserules/about_endpointpolicymanager_java_rules.webp) + +Even though there are more advanced scenarios, this will get you going quickly. + +There are a few basic ways you can use PolicyPak Java Rules Manager. + +- First, create a Microsoft Group Policy Object (GPO) using PolicyPak Java Rules Manager. If you use + Group Policy as the delivery mechanism, then that directive is deployed to client machines. +- Alternatively, export the PolicyPak Java Rules Manager rules and deliver them via the following + applications: + + - Microsoft Endpoint Manager (SCCM and Intune) + - Your own systems management software + - PolicyPak Cloud service + - The client machine with the PolicyPak client-side extension (CSE) + +:::note +If you use the PolicyPak Cloud service, you can deliver Group Policy settings even to +non-domain-joined machines over the Internet. + +::: diff --git a/docs/endpointpolicymanager/components/javaenterpriserules/technotes/_category_.json b/docs/endpointpolicymanager/components/javaenterpriserules/technotes/_category_.json new file mode 100644 index 0000000000..976ee0414f --- /dev/null +++ b/docs/endpointpolicymanager/components/javaenterpriserules/technotes/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Tech Notes", + "position": 3, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "knowledgebase" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/javaenterpriserules/technotes/gettingstarted/_category_.json b/docs/endpointpolicymanager/components/javaenterpriserules/technotes/gettingstarted/_category_.json new file mode 100644 index 0000000000..7eb735f33a --- /dev/null +++ b/docs/endpointpolicymanager/components/javaenterpriserules/technotes/gettingstarted/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Getting Started", + "position": 10, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/knowledgebase/gettingstarted/evaluateurls.md b/docs/endpointpolicymanager/components/javaenterpriserules/technotes/gettingstarted/evaluateurls.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/javaenterpriserules/knowledgebase/gettingstarted/evaluateurls.md rename to docs/endpointpolicymanager/components/javaenterpriserules/technotes/gettingstarted/evaluateurls.md diff --git a/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/knowledgebase/gettingstarted/javaprompts.md b/docs/endpointpolicymanager/components/javaenterpriserules/technotes/gettingstarted/javaprompts.md similarity index 97% rename from docs/endpointpolicymanager/knowledgebase/javaenterpriserules/knowledgebase/gettingstarted/javaprompts.md rename to docs/endpointpolicymanager/components/javaenterpriserules/technotes/gettingstarted/javaprompts.md index 91f209bf72..7f4cf77a31 100644 --- a/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/knowledgebase/gettingstarted/javaprompts.md +++ b/docs/endpointpolicymanager/components/javaenterpriserules/technotes/gettingstarted/javaprompts.md @@ -26,7 +26,7 @@ list. The fastest way to automate this is with Netwrix Endpoint Policy Manager (formerly PolicyPak) Application Settings Manager's Java Paks (any of them starting with Java 7 U 25 have this feature). The video is here: -[Manage and Lock down Java Site List Exceptions](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/java/lockdown.md). +[Manage and Lock down Java Site List Exceptions](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/java/lockdown.md). Other Java prompts you might encounter, which Endpoint Policy Manager Application Settings Manager can overcome are: @@ -52,7 +52,7 @@ Then they are asked to "Allow Now" or "Allow and Remember". The fastest way to automate "Allow and Remember" for Firefox per website is to read and follow this KB: -[Firefox: How do I set "Allow Now", "Allow and Remember" or "Block Plugin" as plug-ins are requested?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/allowremember.md) +[Firefox: How do I set "Allow Now", "Allow and Remember" or "Block Plugin" as plug-ins are requested?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/allowremember.md) ### Type 3: Java Messages Specifically Found in Internet Explorer diff --git a/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/knowledgebase/gettingstarted/version64bit.md b/docs/endpointpolicymanager/components/javaenterpriserules/technotes/gettingstarted/version64bit.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/javaenterpriserules/knowledgebase/gettingstarted/version64bit.md rename to docs/endpointpolicymanager/components/javaenterpriserules/technotes/gettingstarted/version64bit.md diff --git a/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/knowledgebase/gettingstarted/versionjava.md b/docs/endpointpolicymanager/components/javaenterpriserules/technotes/gettingstarted/versionjava.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/javaenterpriserules/knowledgebase/gettingstarted/versionjava.md rename to docs/endpointpolicymanager/components/javaenterpriserules/technotes/gettingstarted/versionjava.md diff --git a/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/knowledgebase/gettingstarted/versionlatest.md b/docs/endpointpolicymanager/components/javaenterpriserules/technotes/gettingstarted/versionlatest.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/javaenterpriserules/knowledgebase/gettingstarted/versionlatest.md rename to docs/endpointpolicymanager/components/javaenterpriserules/technotes/gettingstarted/versionlatest.md diff --git a/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/knowledgebase/gettingstarted/virtualizedbrowsers.md b/docs/endpointpolicymanager/components/javaenterpriserules/technotes/gettingstarted/virtualizedbrowsers.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/javaenterpriserules/knowledgebase/gettingstarted/virtualizedbrowsers.md rename to docs/endpointpolicymanager/components/javaenterpriserules/technotes/gettingstarted/virtualizedbrowsers.md diff --git a/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/knowledgebase/gettingstarted/wildcards.md b/docs/endpointpolicymanager/components/javaenterpriserules/technotes/gettingstarted/wildcards.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/javaenterpriserules/knowledgebase/gettingstarted/wildcards.md rename to docs/endpointpolicymanager/components/javaenterpriserules/technotes/gettingstarted/wildcards.md diff --git a/docs/endpointpolicymanager/components/javaenterpriserules/technotes/knowledgebase.md b/docs/endpointpolicymanager/components/javaenterpriserules/technotes/knowledgebase.md new file mode 100644 index 0000000000..f6bf91da94 --- /dev/null +++ b/docs/endpointpolicymanager/components/javaenterpriserules/technotes/knowledgebase.md @@ -0,0 +1,19 @@ +--- +title: "Knowledge Base" +description: "Knowledge Base" +sidebar_position: 10 +--- + +# Knowledge Base + +See the following Knowledge Base articles for Java Enterprise Rules Manager. + +## Getting Started + +- [I'm using Endpoint Policy Manager Java Rules Manager, but I still get Java prompts when visiting a webpage, or attempting to run a Java applet. What can I do?](/docs/endpointpolicymanager/components/javaenterpriserules/technotes/gettingstarted/javaprompts.md) +- [How are wildcards supported when used with IP addresses in the Java Rules Manager MMC console?](/docs/endpointpolicymanager/components/javaenterpriserules/technotes/gettingstarted/wildcards.md) +- [How does Endpoint Policy Manager Java Rules Manager work with Virtualized Browsers and/or Java?](/docs/endpointpolicymanager/components/javaenterpriserules/technotes/gettingstarted/virtualizedbrowsers.md) +- [How are URLs evaluated within Endpoint Policy Manager Java Rules Manager?](/docs/endpointpolicymanager/components/javaenterpriserules/technotes/gettingstarted/evaluateurls.md) +- [Does Endpoint Policy Manager Java Rules Manager work with 64-bit versions of Java?](/docs/endpointpolicymanager/components/javaenterpriserules/technotes/gettingstarted/version64bit.md) +- [What is the earliest version / what versions of Java are required for Java Rules Manager to work with?](/docs/endpointpolicymanager/components/javaenterpriserules/technotes/gettingstarted/versionjava.md) +- [Why is the latest Java version installed being used instead of the version specified by Java Rules Manager?](/docs/endpointpolicymanager/components/javaenterpriserules/technotes/gettingstarted/versionlatest.md) diff --git a/docs/endpointpolicymanager/components/javaenterpriserules/videos/_category_.json b/docs/endpointpolicymanager/components/javaenterpriserules/videos/_category_.json new file mode 100644 index 0000000000..12b644b19b --- /dev/null +++ b/docs/endpointpolicymanager/components/javaenterpriserules/videos/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Videos", + "position": 2, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "videolearningcenter" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/javaenterpriserules/videos/gettingstarted/_category_.json b/docs/endpointpolicymanager/components/javaenterpriserules/videos/gettingstarted/_category_.json new file mode 100644 index 0000000000..7eb735f33a --- /dev/null +++ b/docs/endpointpolicymanager/components/javaenterpriserules/videos/gettingstarted/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Getting Started", + "position": 10, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/gettingstarted/block.md b/docs/endpointpolicymanager/components/javaenterpriserules/videos/gettingstarted/block.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/gettingstarted/block.md rename to docs/endpointpolicymanager/components/javaenterpriserules/videos/gettingstarted/block.md diff --git a/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/gettingstarted/browserrouter.md b/docs/endpointpolicymanager/components/javaenterpriserules/videos/gettingstarted/browserrouter.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/gettingstarted/browserrouter.md rename to docs/endpointpolicymanager/components/javaenterpriserules/videos/gettingstarted/browserrouter.md diff --git a/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/gettingstarted/gettingstartedv.md b/docs/endpointpolicymanager/components/javaenterpriserules/videos/gettingstarted/gettingstartedv.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/gettingstarted/gettingstartedv.md rename to docs/endpointpolicymanager/components/javaenterpriserules/videos/gettingstarted/gettingstartedv.md diff --git a/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/gettingstarted/itemleveltargeting.md b/docs/endpointpolicymanager/components/javaenterpriserules/videos/gettingstarted/itemleveltargeting.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/gettingstarted/itemleveltargeting.md rename to docs/endpointpolicymanager/components/javaenterpriserules/videos/gettingstarted/itemleveltargeting.md diff --git a/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/gettingstarted/oracledeploymentrulesets.md b/docs/endpointpolicymanager/components/javaenterpriserules/videos/gettingstarted/oracledeploymentrulesets.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/gettingstarted/oracledeploymentrulesets.md rename to docs/endpointpolicymanager/components/javaenterpriserules/videos/gettingstarted/oracledeploymentrulesets.md diff --git a/docs/endpointpolicymanager/components/javaenterpriserules/videos/methods/_category_.json b/docs/endpointpolicymanager/components/javaenterpriserules/videos/methods/_category_.json new file mode 100644 index 0000000000..49f9e436c7 --- /dev/null +++ b/docs/endpointpolicymanager/components/javaenterpriserules/videos/methods/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Methods SCCM XML MDM Cloud PDQ Citrix Etc", + "position": 20, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/methods/cloud.md b/docs/endpointpolicymanager/components/javaenterpriserules/videos/methods/cloud.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/methods/cloud.md rename to docs/endpointpolicymanager/components/javaenterpriserules/videos/methods/cloud.md diff --git a/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/methods/mdm.md b/docs/endpointpolicymanager/components/javaenterpriserules/videos/methods/mdm.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/methods/mdm.md rename to docs/endpointpolicymanager/components/javaenterpriserules/videos/methods/mdm.md diff --git a/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/methods/pdqdeploy.md b/docs/endpointpolicymanager/components/javaenterpriserules/videos/methods/pdqdeploy.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/methods/pdqdeploy.md rename to docs/endpointpolicymanager/components/javaenterpriserules/videos/methods/pdqdeploy.md diff --git a/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/methods/sccm.md b/docs/endpointpolicymanager/components/javaenterpriserules/videos/methods/sccm.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/methods/sccm.md rename to docs/endpointpolicymanager/components/javaenterpriserules/videos/methods/sccm.md diff --git a/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/methods/versionsmultiple.md b/docs/endpointpolicymanager/components/javaenterpriserules/videos/methods/versionsmultiple.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/methods/versionsmultiple.md rename to docs/endpointpolicymanager/components/javaenterpriserules/videos/methods/versionsmultiple.md diff --git a/docs/endpointpolicymanager/components/javaenterpriserules/videos/troubleshooting/_category_.json b/docs/endpointpolicymanager/components/javaenterpriserules/videos/troubleshooting/_category_.json new file mode 100644 index 0000000000..c5b7b877f0 --- /dev/null +++ b/docs/endpointpolicymanager/components/javaenterpriserules/videos/troubleshooting/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Troubleshooting", + "position": 30, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/troubleshooting/xmlsurgery.md b/docs/endpointpolicymanager/components/javaenterpriserules/videos/troubleshooting/xmlsurgery.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/troubleshooting/xmlsurgery.md rename to docs/endpointpolicymanager/components/javaenterpriserules/videos/troubleshooting/xmlsurgery.md diff --git a/docs/endpointpolicymanager/components/javaenterpriserules/videos/videolearningcenter.md b/docs/endpointpolicymanager/components/javaenterpriserules/videos/videolearningcenter.md new file mode 100644 index 0000000000..eb9702c395 --- /dev/null +++ b/docs/endpointpolicymanager/components/javaenterpriserules/videos/videolearningcenter.md @@ -0,0 +1,33 @@ +--- +title: "Video Learning Center" +description: "Video Learning Center" +sidebar_position: 20 +--- + +# Video Learning Center + +See the following Video topics for Java Enterprise Rules Manager. + +## Getting Started + +- [Use Group Policy to dictate which version of Java for what website](/docs/endpointpolicymanager/components/javaenterpriserules/videos/gettingstarted/gettingstartedv.md) + +- [Endpoint Policy ManagerJava Rules Manager and Endpoint Policy Manager Browser Router: Better Together](/docs/endpointpolicymanager/components/javaenterpriserules/videos/gettingstarted/browserrouter.md) + +- [Block ALL Java (with some exceptions)](/docs/endpointpolicymanager/components/javaenterpriserules/videos/gettingstarted/block.md) + +- [Using item Level Targeting to Specify which version of Java to use](/docs/endpointpolicymanager/components/javaenterpriserules/videos/gettingstarted/itemleveltargeting.md) + +- [Endpoint Policy Manager Java Rules Manager... Import from Oracle's Deployment Rule Sets](/docs/endpointpolicymanager/components/javaenterpriserules/videos/gettingstarted/oracledeploymentrulesets.md) + +## Methods: SCCM, XML, MDM, Cloud, PDQ, Citrix, etc. + +- [Deploy and Manage Java with PDQ Deploy and Endpoint Policy Manager ](/docs/endpointpolicymanager/components/javaenterpriserules/videos/methods/pdqdeploy.md) +- [Deploying Multiple Versions of Java to the Same Endpoint Using Endpoint Policy Manager and PDQ Deploy](/docs/endpointpolicymanager/components/javaenterpriserules/videos/methods/versionsmultiple.md) +- [Use Endpoint Policy Manager Cloud to choose which version of Java for what website](/docs/endpointpolicymanager/components/javaenterpriserules/videos/methods/cloud.md) +- [Use SCCM, KACE, etc to specify different websites for different Java](/docs/endpointpolicymanager/components/javaenterpriserules/videos/methods/sccm.md) +- [Manage Java with Java Rules Manager and your MDM service](/docs/endpointpolicymanager/components/javaenterpriserules/videos/methods/mdm.md) + +## Troubleshooting + +- [Endpoint Policy Manager Java Rules Manager: XML Surgery](/docs/endpointpolicymanager/components/javaenterpriserules/videos/troubleshooting/xmlsurgery.md) diff --git a/docs/endpointpolicymanager/components/networksecuritymanager/_category_.json b/docs/endpointpolicymanager/components/networksecuritymanager/_category_.json new file mode 100644 index 0000000000..435ada7ce2 --- /dev/null +++ b/docs/endpointpolicymanager/components/networksecuritymanager/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Network Security Manager", + "position": 9, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/networksecuritymanager/manual/_category_.json b/docs/endpointpolicymanager/components/networksecuritymanager/manual/_category_.json new file mode 100644 index 0000000000..5bc73990cd --- /dev/null +++ b/docs/endpointpolicymanager/components/networksecuritymanager/manual/_category_.json @@ -0,0 +1 @@ +{"label": "Manual", "position": 5, "collapsed": true, "collapsible": true, "link": {"type": "doc", "id": "overview"}} diff --git a/docs/endpointpolicymanager/components/networksecuritymanager/manual/overview.md b/docs/endpointpolicymanager/components/networksecuritymanager/manual/overview.md new file mode 100644 index 0000000000..dffdfa817c --- /dev/null +++ b/docs/endpointpolicymanager/components/networksecuritymanager/manual/overview.md @@ -0,0 +1,152 @@ +--- +title: "Endpoint Policy Manager Network Security Manager" +description: "Endpoint Policy Manager Network Security Manager" +sidebar_position: 30 +--- + +# Endpoint Policy Manager Network Security Manager + +Network Security Manager enables you to restrict processes to communicate with specific IP addresses +or DNS addresses. This increases the security of applications (or browsers) so end-users (or +anonymous users) on the endpoints cannot use programs to connect to unwanted network addresses. + +Some examples of use are: + +- Ensuring your Quickbooks client application only connects to your Quickbooks server (and not some + rogue server) +- Ensuring specific browsers can only communicate with specifically named websites. +- Ensuring a networking app, like Telnet or WinSCP or FileZilla can only communicate and transfer + files to specifically named servers. + +## Getting started with Endpoint Policy Manager Network Security Manager + +:::info +For an overview of this section, see this video: See +[Endpoint Policy Manager Network Security Manager - The Basics](/docs/endpointpolicymanager/components/networksecuritymanager/videos/gettingstarted/basics.md) +topic for additional information. +::: + + +Pick an application you wish to restrict, like a browser (such as Edge, Firefox, PaleMoon, etc) or a +networking application (like Telnet, WinSCP, etc.). Then pick the destinations you wish for that +application to be restricted to. + +In this example, we'll restrict the Edge browser to only be allowed to communicate with +[www.Netwrix.com](http://www.netwrix.com/). All other communication will be rejected. + +Start out by creating a GPO and linking it over to where your computer objects are. + +Then use Computer Configuration | Netwrix Endpoint Policy Manager | Desktop Automation Pak | Network +Security Manager. + +### Creating a Global Settings Policy + +Your first stop is to create a **New Global settings policy** like what's seen here. + +![nsm01](/images/endpointpolicymanager/scriptstriggers/nsm01.webp) + +Once selected you can see your configurable options for the machines. + +![nsm02](/images/endpointpolicymanager/scriptstriggers/nsm02.webp) + +- Enable Network Security Manager – This is the master ON switch for the feature. +- Show Management Notifications – You can choose to show if the processes are being managed by + Endpoint Policy Manager Network Security Manager (or not) +- Notification message should close in X seconds – Provides a countdown in seconds before the + message is removed. +- Disable recurring notifications after X impressions – Useful to set so the user can get the idea + that there is control; but eventually you can tamp down the number of pop-ups. +- Text Customization (Window Title, Notification Title, Customized Message) – Various settings to + configure the dialog + +### Creating a Process Matching Policy + +Next you'll want to create a process matching policy. Again, in our examples, we'll match on +Microsoft Edge. + +Create a New Policy like what's seen here. + +![nsm03](/images/endpointpolicymanager/scriptstriggers/nsm03.webp) + +Next you'll want to match a specific application. You can do this via Simple or Combo rules. This +example will use a Simple rule. + +:::info +For details about Simple and Combo rules, refer to the Endpoint Policy +Manager Least Privilege Manager Manual (as they won't be repeated here). +::: + + +Specify the location for Microsoft Edge via Path rule which is +`C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe` + +![nsm04](/images/endpointpolicymanager/scriptstriggers/nsm04.webp) + +Then in the **Add Connections Conditions** dialog, specify the following values to Allow Any +activity to www.Netwrix.com by Domain Name. + +![nsm05](/images/endpointpolicymanager/scriptstriggers/nsm05.webp) + +Then click **Add** and make policy #2 a Block policy which blocks everything else. + +![nsm06](/images/endpointpolicymanager/scriptstriggers/nsm06.webp) + +Results should look like this. + +![nsm07](/images/endpointpolicymanager/scriptstriggers/nsm07.webp) + +Click **Next** to continue. Accept the defaults on the final Wizard page and click **Finish**. + +![nsm08](/images/endpointpolicymanager/scriptstriggers/nsm08.webp) + +### Testing your Policy Out + +On your endpoint which has the Endpoint Policy Manager CSE installed and licensed, run GPupdate or +reboot the machine to acquire the policies. + +The results will be that when Edge is launched, end users cannot go to any network location, like +Microsoft.com, but are restricted to the specific network location you specified, www.Netwrix.com. + +![nsm09](/images/endpointpolicymanager/scriptstriggers/nsm09.webp) + +## Auditing Events + +:::info +See the +[Endpoint Policy Manager Network Security Manager - Auditing Events](/docs/endpointpolicymanager/components/networksecuritymanager/videos/gettingstarted/auditingevents.md) +topic for additional information. +::: + + +Auditing Events can be useful if you want to determine if your rules are working. Each rule may be +individually enabled like what's seen here. + +![nsm10](/images/endpointpolicymanager/scriptstriggers/nsm10.webp) + +In this example I'll have both rules set to Log. + +![nsm11](/images/endpointpolicymanager/scriptstriggers/nsm11.webp) + +The results can be pretty noisy depending on the application. In this case whenever Edge is run you +will get a myriad of Blocked events like what's seen here. + +![nsm12](/images/endpointpolicymanager/scriptstriggers/nsm12.webp) + +You may wish to audit for blocks for a while then change gears to audit only for successes later to +reduce the amount of noise. + +## Additional Topics & References + +Because Network Security Manager uses the same basic UI as Endpoint Policy Manager Least Privilege +Manager, you can learn more about Simple rules here: + +- [Elevating Executables](/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/rules/executables.md) +- [Creating and Using Executable Combo Rules](/docs/endpointpolicymanager/components/endpointprivilegemanager/manual/windows/overviewmisc/bestpractices/executablecombo.md) + +You can learn more about the following additional Endpoint Policy Manager Network Security manager +topics via our How-To videos: + +- Understanding Applications & Ports: + [Endpoint Policy Manager Network Security Manager - Applications and Ports](/docs/endpointpolicymanager/components/networksecuritymanager/videos/gettingstarted/applicationsports.md) +- Deeper Dive into Customizations & Notifications: + [Endpoint Policy Manager Network Security Manager - Global settings](/docs/endpointpolicymanager/components/networksecuritymanager/videos/gettingstarted/globalsettings.md) diff --git a/docs/endpointpolicymanager/components/networksecuritymanager/technotes/_category_.json b/docs/endpointpolicymanager/components/networksecuritymanager/technotes/_category_.json new file mode 100644 index 0000000000..7aafe0ff8d --- /dev/null +++ b/docs/endpointpolicymanager/components/networksecuritymanager/technotes/_category_.json @@ -0,0 +1 @@ +{"label": "Tech Notes", "position": 10, "collapsed": true, "collapsible": true} diff --git a/docs/endpointpolicymanager/components/networksecuritymanager/videos/_category_.json b/docs/endpointpolicymanager/components/networksecuritymanager/videos/_category_.json new file mode 100644 index 0000000000..77675c0c90 --- /dev/null +++ b/docs/endpointpolicymanager/components/networksecuritymanager/videos/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Videos", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "videolearningcenter" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/networksecuritymanager/videos/gettingstarted/_category_.json b/docs/endpointpolicymanager/components/networksecuritymanager/videos/gettingstarted/_category_.json new file mode 100644 index 0000000000..7eb735f33a --- /dev/null +++ b/docs/endpointpolicymanager/components/networksecuritymanager/videos/gettingstarted/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Getting Started", + "position": 10, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/networksecuritymanager/videolearningcenter/gettingstarted/applicationsports.md b/docs/endpointpolicymanager/components/networksecuritymanager/videos/gettingstarted/applicationsports.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/networksecuritymanager/videolearningcenter/gettingstarted/applicationsports.md rename to docs/endpointpolicymanager/components/networksecuritymanager/videos/gettingstarted/applicationsports.md diff --git a/docs/endpointpolicymanager/knowledgebase/networksecuritymanager/videolearningcenter/gettingstarted/auditingevents.md b/docs/endpointpolicymanager/components/networksecuritymanager/videos/gettingstarted/auditingevents.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/networksecuritymanager/videolearningcenter/gettingstarted/auditingevents.md rename to docs/endpointpolicymanager/components/networksecuritymanager/videos/gettingstarted/auditingevents.md diff --git a/docs/endpointpolicymanager/knowledgebase/networksecuritymanager/videolearningcenter/gettingstarted/basics.md b/docs/endpointpolicymanager/components/networksecuritymanager/videos/gettingstarted/basics.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/networksecuritymanager/videolearningcenter/gettingstarted/basics.md rename to docs/endpointpolicymanager/components/networksecuritymanager/videos/gettingstarted/basics.md diff --git a/docs/endpointpolicymanager/knowledgebase/networksecuritymanager/videolearningcenter/gettingstarted/domainnames.md b/docs/endpointpolicymanager/components/networksecuritymanager/videos/gettingstarted/domainnames.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/networksecuritymanager/videolearningcenter/gettingstarted/domainnames.md rename to docs/endpointpolicymanager/components/networksecuritymanager/videos/gettingstarted/domainnames.md diff --git a/docs/endpointpolicymanager/knowledgebase/networksecuritymanager/videolearningcenter/gettingstarted/globalsettings.md b/docs/endpointpolicymanager/components/networksecuritymanager/videos/gettingstarted/globalsettings.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/networksecuritymanager/videolearningcenter/gettingstarted/globalsettings.md rename to docs/endpointpolicymanager/components/networksecuritymanager/videos/gettingstarted/globalsettings.md diff --git a/docs/endpointpolicymanager/components/networksecuritymanager/videos/videolearningcenter.md b/docs/endpointpolicymanager/components/networksecuritymanager/videos/videolearningcenter.md new file mode 100644 index 0000000000..f7d835c013 --- /dev/null +++ b/docs/endpointpolicymanager/components/networksecuritymanager/videos/videolearningcenter.md @@ -0,0 +1,17 @@ +--- +title: "Video Learning Center" +description: "Video Learning Center" +sidebar_position: 10 +--- + +# Video Learning Center + +See the following Video topics for Network Security Manager. + +## Getting Started + +- [Endpoint Policy Manager Network Security Manager - The Basics](/docs/endpointpolicymanager/components/networksecuritymanager/videos/gettingstarted/basics.md) +- [Endpoint Policy Manager Network Security Manager - Using Domain Names](/docs/endpointpolicymanager/components/networksecuritymanager/videos/gettingstarted/domainnames.md) +- [Endpoint Policy Manager Network Security Manager - Applications and Ports](/docs/endpointpolicymanager/components/networksecuritymanager/videos/gettingstarted/applicationsports.md) +- [Endpoint Policy Manager Network Security Manager - Global settings](/docs/endpointpolicymanager/components/networksecuritymanager/videos/gettingstarted/globalsettings.md) +- [Endpoint Policy Manager Network Security Manager - Auditing Events](/docs/endpointpolicymanager/components/networksecuritymanager/videos/gettingstarted/auditingevents.md) diff --git a/docs/endpointpolicymanager/components/preferencesmanager/_category_.json b/docs/endpointpolicymanager/components/preferencesmanager/_category_.json new file mode 100644 index 0000000000..8cf96db072 --- /dev/null +++ b/docs/endpointpolicymanager/components/preferencesmanager/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Preferences Manager", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/preferencesmanager/manual/_category_.json b/docs/endpointpolicymanager/components/preferencesmanager/manual/_category_.json new file mode 100644 index 0000000000..20ca7992c8 --- /dev/null +++ b/docs/endpointpolicymanager/components/preferencesmanager/manual/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Manual", + "position": 1, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/preferencesmanager/manual/gettingstarted/_category_.json b/docs/endpointpolicymanager/components/preferencesmanager/manual/gettingstarted/_category_.json new file mode 100644 index 0000000000..9a0009e0f3 --- /dev/null +++ b/docs/endpointpolicymanager/components/preferencesmanager/manual/gettingstarted/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Quick Start", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "gettingstarted" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/gettingstarted/deploymsis.md b/docs/endpointpolicymanager/components/preferencesmanager/manual/gettingstarted/deploymsis.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/gettingstarted/deploymsis.md rename to docs/endpointpolicymanager/components/preferencesmanager/manual/gettingstarted/deploymsis.md diff --git a/docs/endpointpolicymanager/components/preferencesmanager/manual/gettingstarted/gettingstarted.md b/docs/endpointpolicymanager/components/preferencesmanager/manual/gettingstarted/gettingstarted.md new file mode 100644 index 0000000000..56a3a8c47d --- /dev/null +++ b/docs/endpointpolicymanager/components/preferencesmanager/manual/gettingstarted/gettingstarted.md @@ -0,0 +1,83 @@ +--- +title: "Quick Start" +description: "Quick Start" +sidebar_position: 20 +--- + +# Quick Start + +This Quickstart of Netwrix Endpoint Policy Manager (formerly PolicyPak) Preferences Manager will +introduce the following: + +- Deploying Microsoft Group Policy Preference items without Group Policy by using your own on-prem + deployment system, such as Microsoft Endpoint Manager (SCCM and Intune), KACE, and so on. +- Keeping Microsoft Group Policy Preferences settings compliant even when the computer goes offline + (regardless of how they are deployed). + +:::note +See Appendix E: +[Installation Quick Start](/docs/endpointpolicymanager/gettingstarted/overviewinstall/overviewinstall.md) and User Guide for +additoinal information on Endpoint Policy Manager Preferences Manager in use with Endpoint Policy +Manager Cloud +::: + + +:::note +To perform these demonstrations, Microsoft Group Policy Preference items must be +available. You can use some of our preconfigured items from the Endpoint Policy Manager Portal, or +you can create your own using the Group Policy Preferences Editor. +::: + + +## Option 1 - Downloading Microsoft Group Policy Preference Example Items + +Some easy-to-use Microsoft Group Policy Preference items have been previously created and are +available inside the Endpoint Policy Manager Portal for download in the Latest Manuals section. +Currently the file is called `ppprefs-shortcut.xml`.  You can get to it by accessing the customer +portal and navigating to Latest Manuals.  Then, click on Endpoint Policy Manager Examples (to be +used with PP Cloud-MDM-SCCM-etc).zip. + +![quickstart_using_policypak](/images/endpointpolicymanager/preferences/quickstart_using_endpointpolicymanager.webp) + +Inside the download of the Endpoint Policy Manager preferences and Endpoint Policy Manager Cloud XML +examples, you'll see a file named `ppprefs-shortcut.xml`. + +![quickstart_using_policypak_1](/images/endpointpolicymanager/preferences/quickstart_using_endpointpolicymanager_1.webp) + +Remove the file from the ZIP archive, and put it in a handy place for the deployment step. + +The Group Policy Preference item has a simple goal: to place a shortcut for www.endpointpolicymanager.com on the +desktop. If you wish to create a Group Policy Preference item from scratch, see the next section. + +## Option 2 - Using Microsoft Group Policy Preferences Editor + +While you can use any combination of Group Policy Preference items, we strongly recommend that you +use the Group Policy Preference item shown below, which puts an icon for www.endpointpolicymanager.com on the +desktop. + +These are the settings used to make the Group Policy Preference item: + +- Name: www.endpointpolicymanager.com +- Target Type: URL +- Location: Desktop +- Target URL: www.endpointpolicymanager.com +- Icon file path: `%SystemRoot%\system32\SHELL32.dll` +- Icon index: 47 + +![quickstart_using_policypak_2](/images/endpointpolicymanager/preferences/quickstart_using_endpointpolicymanager_2.webp) + +When you click **OK**, it will save the data within the Group Policy Object (GPO). However, you can +drag and drop a Group Policy Preference item to the desktop or a folder, which makes an XML file. +Another way to do this is to right-click either the Endpoint Policy Manager or Endpoint Policy +Manager Preferences Manager node, as seen below, and use the Group Policy Preference Export wizard, +which will export the Group Policy Preference items from the GPO. + +:::note +The Group Policy Preference Export wizard will only export settings for the User side or +Computer side, depending on which side on are on. +::: + + +![quickstart_using_policypak_3](/images/endpointpolicymanager/preferences/quickstart_using_endpointpolicymanager_3.webp) + +Keep the Group Policy Preference item file you created handy for the next step. diff --git a/docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/gettingstarted/maintaincompliance.md b/docs/endpointpolicymanager/components/preferencesmanager/manual/gettingstarted/maintaincompliance.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/gettingstarted/maintaincompliance.md rename to docs/endpointpolicymanager/components/preferencesmanager/manual/gettingstarted/maintaincompliance.md diff --git a/docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/gettingstarted/makemsis.md b/docs/endpointpolicymanager/components/preferencesmanager/manual/gettingstarted/makemsis.md similarity index 95% rename from docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/gettingstarted/makemsis.md rename to docs/endpointpolicymanager/components/preferencesmanager/manual/gettingstarted/makemsis.md index b5008149e5..e64b0f28b6 100644 --- a/docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/gettingstarted/makemsis.md +++ b/docs/endpointpolicymanager/components/preferencesmanager/manual/gettingstarted/makemsis.md @@ -8,7 +8,7 @@ sidebar_position: 10 :::note For an overview of the Endpoint Policy Manager Exporter utility, please watch this video: -[](http://www.endpointpolicymanager.com/video/endpointpolicymanager-preferences-with-endpointpolicymanager-exporter.html)[Endpoint Policy ManagerPreferences with Endpoint Policy Manager Exporter](/docs/endpointpolicymanager/knowledgebase/archive/preferencesexporter.md)l. +[](http://www.endpointpolicymanager.com/video/endpointpolicymanager-preferences-with-endpointpolicymanager-exporter.html)[Endpoint Policy ManagerPreferences with Endpoint Policy Manager Exporter](/docs/endpointpolicymanager/archive/preferencesexporter.md)l. ::: @@ -67,5 +67,5 @@ we've saved it to the desktop as Deploy GPP MSI.msi. ![quickstart_using_policypak_8](/images/endpointpolicymanager/preferences/quickstart_using_endpointpolicymanager_8.webp) -See Appendix A: [Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/uemtools.md) for +See Appendix A: [Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/uemtools.md) for additional information on the Endpoint Policy Manager Exporter utility diff --git a/docs/endpointpolicymanager/components/preferencesmanager/manual/itemleveltargeting.md b/docs/endpointpolicymanager/components/preferencesmanager/manual/itemleveltargeting.md new file mode 100644 index 0000000000..52ddd6c052 --- /dev/null +++ b/docs/endpointpolicymanager/components/preferencesmanager/manual/itemleveltargeting.md @@ -0,0 +1,81 @@ +--- +title: "Item-Level Targeting" +description: "Item-Level Targeting" +sidebar_position: 30 +--- + +# Item-Level Targeting + +One of the best features of Microsoft Group Policy Preferences is its Item-Level Targeting. It +enables you to filter where a particular Group Policy Preference item will take effect. + +:::note +See [Group Policy Preferences: Item Level Targeting](/docs/endpointpolicymanager/archive/itemleveltartgeting.md) +for a video of Group Policy Preferences and Item-Level targeting +::: + + +If you followed the Quickstart guide in the previous section, then you deployed a Group Policy +Preferences shortcut item to the desktop for every user. With Netwrix Endpoint Policy Manager +(formerly PolicyPak) Preferences Manager, there are two ways you can limit or target which users and +computers will receive Group Policy Preferences directives by doing the following: + +- Use Endpoint Policy Manager Exporter and specify certain users and groups instead of computer/all + users +- Modify Group Policy Preference items in such a way that they have Item-Level Targeting that + describes the conditions under which they should apply + +Additionally, you can choose to use both methods together if you prefer. For instance, you might: + +- Use the Group Policy Preferences Editor and make a Group Policy Preferences Power Settings item to + configure power settings +- Continue to use the Group Policy Preferences Editor Item-Level Targeting to specify that the item + should only apply to Windows 10 laptops that are in a particular IP address range + (192.168.2.0–192.168.3.0) +- Use Endpoint Policy Manager Exporter to specify that only the Sales group within Active Directory + should process this policy + +In this example, the net result of using these methods is that your Group Policy Preference item +will only apply to Windows 10 machines that are laptops and within a specific IP address range +(192.168.2.0–192.168.3.0), and when the user is a member of the Sales Active Directory group. + +![group_policy_preferences_item](/images/endpointpolicymanager/preferences/group_policy_preferences_item.webp) + +You can then choose which item you want to target: + +![group_policy_preferences_item_1](/images/endpointpolicymanager/preferences/group_policy_preferences_item_1.webp) + +You can apply one or more targeting items to a Microsoft Group Policy Preference item, which enables +targeting items to be joined logically. You can also add targeting collections, which group together +targeting items in much the same way parentheses are used in an equation. In this way, you can +create a complex determination about where a policy will be applied. Collections may be set to And, +Or, Is, or Is Not. + +![group_policy_preferences_item_2](/images/endpointpolicymanager/preferences/group_policy_preferences_item_2.webp) + +In the example above the Pak would only apply to (1) Windows 10 machines when (2) the machine is +portable and (3) the user is in the FABRIKAM\Traveling Sales Users group. + +Here are some real-world examples of how you can use Item-Level Targeting with Group Policy +Preferences: + +- Mobile computers — If you want to deploy settings for users on mobile PCs, filter the Group Policy + Preference item to deploy to only mobile PCs by using the Portable Computer targeting item. +- Operating system version — You can specify different settings for applications based on the + operating system version. To do this, create two Group Policy Preference items, one for each + operating system. Then filter each AppSet using the Operating System targeting item. +- Group membership — You can specify a Group Policy Preference item that would normally apply to all + users on the computer and, instead, filter by members within a specific group to pick up and + process the Group Policy Preference item. +- IP range — You can specify different settings for various IP ranges, like different browser + settings for the home office and each field office. + +When Item-Level Targeting is used, it can be seen and verified in the XML view of the Group Policy +Preference item by choosing the Display Xml option. The Item-Level Targeting is highlighted in the +Filters section. + +![group_policy_preferences_item_3](/images/endpointpolicymanager/preferences/group_policy_preferences_item_3.webp) + +![group_policy_preferences_item_4](/images/endpointpolicymanager/preferences/group_policy_preferences_item_4.webp) + +The XML of the Group Policy Preference item verifies that Item-Level Targeting is being used. diff --git a/docs/endpointpolicymanager/components/preferencesmanager/manual/overview.md b/docs/endpointpolicymanager/components/preferencesmanager/manual/overview.md new file mode 100644 index 0000000000..747569dbcf --- /dev/null +++ b/docs/endpointpolicymanager/components/preferencesmanager/manual/overview.md @@ -0,0 +1,114 @@ +--- +title: "Preferences Manager" +description: "Preferences Manager" +sidebar_position: 20 +--- + +# Preferences Manager + +:::note +Before reading this section, please ensure you have read Book 2: +[Installation Quick Start](/docs/endpointpolicymanager/gettingstarted/overviewinstall/overviewinstall.md), which will help you +learn to do the following: +::: + + +- Install the Admin MSI on your GPMC machine +- Install the CSE on a test Windows machine +- Set up a computer in Trial mode or Licensed mode +- Set up a common OU structure +- Optionally, if you don't want to use Group Policy, read the section in Appendix A: + [Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/uemtools.md) on Group Policy and + non–Group Policy methods (MEMCM, KACE, and MDM service or Netwrix Endpoint Policy Manager + (formerly PolicyPak) Cloud) to deploy your directives. + +Microsoft Group Policy Preferences are great because they let you configure 21 categories of items, +including the following a,nd many more. + +- Printers +- Shortcuts +- Drive maps +- VPN settings +- Device lock-down +- Regional settings + +![about_policypak_gpo_export](/images/endpointpolicymanager/preferences/about_endpointpolicymanager_gpo_export.webp) + +Despite these advantages, Microsoft's Group Policy Preferences have some issues that cannot be +overcome without a little help. That's where Endpoint Policy Manager Preferences Manager comes in. + +## Main Concepts + +Endpoint Policy Manager Preferences Manager does the following jobs: + +- It maintains the compliance of a Group Policy Preference item even when the computer is offline. +- It enables a Group Policy Preference item to be delivered without using Active Directory Group + Policy. Therefore, with Endpoint Policy Manager Preferences Manager, you may now use Microsoft + Endpoint Manager (SCCM and Intune), LANDesk, or KACE to deliver Group Policy Preferences without + the inbox Group Policy mechanism being involved. +- In conjunction with the Endpoint Policy Manager Cloud service, or your own mobile device + management (MDM) service, you can deliver Group Policy Preference items to computers over the + Internet (to both domain-joined and non-domain-joined machines). For more information on Endpoint + Policy Manager Cloud, see Appendix E: + [Setup, Download, Install, and Verify](/docs/endpointpolicymanager/gettingstarted/cloudmanual/quickstart/quickstart.md) and User Guide. For more + information about using Endpoint Policy Manager with an MDM service, see Appendix A: + [Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/uemtools.md). + +:::note +If you use the Endpoint Policy Manager Cloud service, you can deliver Group Policy +Preferences directives even to non-domain-joined machines. +::: + + +:::note +See +[Which settings can be managed with the Preferences Manager component?](/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicypreferences/settings.md) for additional +information on Endpoint Policy Manager Preferences Manager used with SCCM, Endpoint Policy Manager +Cloud, or an MDM service, +::: + + +The basic way to use Endpoint Policy Manager Preferences Manager is to perform the following +procedures: + +- Create a Microsoft Group Policy Preferences directive on your Windows administrative machine using + the Microsoft GPMC and Group Policy Preferences Editor. +- Deliver the directive to the client machines. If you use Group Policy as the delivery mechanism, + the directive is received via client machines. You can also use Endpoint Policy Manager + Preferences Manager to deliver it via the following ways: + + - Microsoft Endpoint Manager (SCCM and Intune) + - Your own systems management software + - Endpoint Policy Manager Cloud service + +- Allow the client machine to embrace the directives and perform the work. + +This way you are not required to use the Group Policy mechanism as the transport to deploy Group +Policy Preferences directives. + +## Moving Parts + +Endpoint Policy Manager Preferences Manager has the following main components: + +- A management station — Start out by creating a standard Group Policy Preference item using the + GPMC you use every day. Then export the settings using the Endpoint Policy Manager Preferences + Manager Export wizard. You can export these settings for use with Endpoint Policy Manager Cloud, + or deploy these settings using methods other than Group Policy methods. +- The Endpoint Policy Manager client-side extension (CSE) — This runs on the client (target) + machine. It is the same CSE for all Endpoint Policy Manager products. There isn't anything + separate to install. +- Endpoints — Endpoints must be licensed for Endpoint Policy Manager Preferences Manager using one + of the licensing methods. +- Endpoint Policy Manager Exporter (optional) — A free utility that lets you take Microsoft Group + Policy Preferences and our other Endpoint Policy Manager XML data files and wrap them into a + portable MSI file for deployment using Microsoft Endpoint Manager (SCCM and Intune), or your own + systems management software. + +![about_policypak_gpo_export_1](/images/endpointpolicymanager/preferences/about_endpointpolicymanager_gpo_export_1.webp) + +Endpoint Policy Manager Preferences Manager does not require any particular type of domain +controllers (DCs). Nothing is installed on any DC, and you don't need to extend the Active Directory +schema. Additionally, you do not need to install any server components, upgrade any servers or DCs, +or buy any server-side infrastructure. There is no requirement for domain mode or functional level. +To be clear, every client computer (Windows 7 and higher) or Terminal Services (RDS)/Citrix machine +(Windows Server 2008 or higher) must have the Endpoint Policy Manager CSE installed and licensed. diff --git a/docs/endpointpolicymanager/components/preferencesmanager/manual/preferences/_category_.json b/docs/endpointpolicymanager/components/preferencesmanager/manual/preferences/_category_.json new file mode 100644 index 0000000000..10bdcb77e3 --- /dev/null +++ b/docs/endpointpolicymanager/components/preferencesmanager/manual/preferences/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Troubleshooting", + "position": 40, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/preferences/clientmachines.md b/docs/endpointpolicymanager/components/preferencesmanager/manual/preferences/clientmachines.md similarity index 92% rename from docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/preferences/clientmachines.md rename to docs/endpointpolicymanager/components/preferencesmanager/manual/preferences/clientmachines.md index 2beffc8fdf..657edb33c2 100644 --- a/docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/preferences/clientmachines.md +++ b/docs/endpointpolicymanager/components/preferencesmanager/manual/preferences/clientmachines.md @@ -22,7 +22,7 @@ installation of the MSI? **Step 4 –** Is your computer licensed? All computers must be licensed in order for Endpoint Policy Manager Preferences Manager to work properly (see Book 1: -[Introduction and Basic Concepts](/docs/endpointpolicymanager/manuals/introductionandquick/basicconcepts/basicconcepts.md) for more information). Alternatively, try +[Introduction and Basic Concepts](/docs/endpointpolicymanager/gettingstarted/basicconcepts/basicconcepts.md) for more information). Alternatively, try renaming the computer to "Computer1" (or a similar name) such that "computer" is in the name. When you do this, the Endpoint Policy Manager Preferences Manager CSE will act as if it's fully licensed. If Endpoint Policy Manager Preferences Manager starts to work, you have a licensing issue. diff --git a/docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/preferences/logs.md b/docs/endpointpolicymanager/components/preferencesmanager/manual/preferences/logs.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/preferences/logs.md rename to docs/endpointpolicymanager/components/preferencesmanager/manual/preferences/logs.md diff --git a/docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/preferences/logsenhanced.md b/docs/endpointpolicymanager/components/preferencesmanager/manual/preferences/logsenhanced.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/preferences/logsenhanced.md rename to docs/endpointpolicymanager/components/preferencesmanager/manual/preferences/logsenhanced.md diff --git a/docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/preferences/overview.md b/docs/endpointpolicymanager/components/preferencesmanager/manual/preferences/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/preferences/overview.md rename to docs/endpointpolicymanager/components/preferencesmanager/manual/preferences/overview.md diff --git a/docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/setup.md b/docs/endpointpolicymanager/components/preferencesmanager/manual/setup.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/setup.md rename to docs/endpointpolicymanager/components/preferencesmanager/manual/setup.md diff --git a/docs/endpointpolicymanager/components/preferencesmanager/overview.md b/docs/endpointpolicymanager/components/preferencesmanager/overview.md new file mode 100644 index 0000000000..81cea30700 --- /dev/null +++ b/docs/endpointpolicymanager/components/preferencesmanager/overview.md @@ -0,0 +1,19 @@ +--- +title: "Preferences Manager Overview" +description: "Preferences Manager enables deployment of Group Policy Preferences" +sidebar_position: 1 +--- + +# Preferences Manager + +Preferences Manager enables administrators to harness the power of Microsoft's Group Policy Preferences and deploy them without Group Policy via Microsoft Endpoint Manager (SCCM), KACE, or Endpoint Policy Manager Cloud. + +## Quick Links + +### 📖 [Manual](./manual/) +Complete documentation for using Preferences Manager: +- **Overview** - Getting started with preferences management +- **Setup** - Configuration and setup procedures +- **Item Level Targeting** - Advanced targeting capabilities +- **Getting Started** - Step-by-step deployment guides +- **Preferences** - Detailed preferences configuration \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/_category_.json b/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/_category_.json new file mode 100644 index 0000000000..e9286a705a --- /dev/null +++ b/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Remote Desktop Protocol Manager", + "position": 11, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} diff --git a/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/knowledgebase/_category_.json b/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/knowledgebase/_category_.json new file mode 100644 index 0000000000..10ef29b1e3 --- /dev/null +++ b/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/knowledgebase/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Tech Notes", + "position": 2, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/knowledgebase/overview.md b/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/knowledgebase/overview.md new file mode 100644 index 0000000000..2373be5001 --- /dev/null +++ b/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/knowledgebase/overview.md @@ -0,0 +1,18 @@ +--- +title: "RDP Manager Tech Notes" +description: "Technical notes and troubleshooting for Remote Desktop Protocol Manager" +sidebar_position: 1 +--- + +# RDP Manager Tech Notes + +Technical information and troubleshooting resources for Remote Desktop Protocol Manager. + +## Installation +Configuration and installation guides for RDP Manager. + +## Tips and Tricks +Best practices and helpful tips for using RDP Manager effectively. + +## Troubleshooting +Solutions to common issues and problems with RDP Manager. \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/manual/_category_.json b/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/manual/_category_.json new file mode 100644 index 0000000000..e49e37b4ba --- /dev/null +++ b/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/manual/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Manual", + "position": 1, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/manual/configuration/_category_.json b/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/manual/configuration/_category_.json new file mode 100644 index 0000000000..231704b45b --- /dev/null +++ b/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/manual/configuration/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Configuration", + "position": 2, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/manuals/desktopautomationand/remotedesktopprotoco/itemleveltargeting/exportcollections.md b/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/manual/configuration/exportcollections.md similarity index 100% rename from docs/endpointpolicymanager/manuals/desktopautomationand/remotedesktopprotoco/itemleveltargeting/exportcollections.md rename to docs/endpointpolicymanager/components/remotedesktopprotocolmanager/manual/configuration/exportcollections.md diff --git a/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/manual/configuration/itemleveltargeting.md b/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/manual/configuration/itemleveltargeting.md new file mode 100644 index 0000000000..50f0f4f38a --- /dev/null +++ b/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/manual/configuration/itemleveltargeting.md @@ -0,0 +1,27 @@ +--- +title: "Using Item-Level Targeting with RDP Manager" +description: "Learn how to use item-level targeting with Remote Desktop Protocol Manager" +sidebar_position: 1 +--- + +# Using Item-Level Targeting with RDP Manager + +Item-level targeting allows you to apply Remote Desktop Protocol Manager policies to specific users, computers, or groups based on various criteria. + +## Overview + +Item-level targeting provides granular control over which users or computers receive specific RDP policies. This is useful when you need different RDP configurations for different groups of users or systems. + +## Targeting Options + +### User-Based Targeting +- Target specific users +- Target user groups +- Target based on user properties + +### Computer-Based Targeting +- Target specific computers +- Target computer groups +- Target based on computer properties + +For detailed configuration steps, see the original item-level targeting documentation. diff --git a/docs/endpointpolicymanager/manuals/desktopautomationand/remotedesktopprotoco/itemleveltargeting/processorderprecedence.md b/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/manual/configuration/processorderprecedence.md similarity index 100% rename from docs/endpointpolicymanager/manuals/desktopautomationand/remotedesktopprotoco/itemleveltargeting/processorderprecedence.md rename to docs/endpointpolicymanager/components/remotedesktopprotocolmanager/manual/configuration/processorderprecedence.md diff --git a/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/manual/gettingtoknow/_category_.json b/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/manual/gettingtoknow/_category_.json new file mode 100644 index 0000000000..400fb26178 --- /dev/null +++ b/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/manual/gettingtoknow/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Getting to Know RDP Manager", + "position": 1, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/manuals/desktopautomationand/remotedesktopprotoco/gettingtoknowrdpmana/importrdpfile.md b/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/manual/gettingtoknow/importrdpfile.md similarity index 100% rename from docs/endpointpolicymanager/manuals/desktopautomationand/remotedesktopprotoco/gettingtoknowrdpmana/importrdpfile.md rename to docs/endpointpolicymanager/components/remotedesktopprotocolmanager/manual/gettingtoknow/importrdpfile.md diff --git a/docs/endpointpolicymanager/manuals/desktopautomationand/remotedesktopprotoco/overview_1.md b/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/manual/gettingtoknow/overview_1.md similarity index 100% rename from docs/endpointpolicymanager/manuals/desktopautomationand/remotedesktopprotoco/overview_1.md rename to docs/endpointpolicymanager/components/remotedesktopprotocolmanager/manual/gettingtoknow/overview_1.md diff --git a/docs/endpointpolicymanager/manuals/desktopautomationand/remotedesktopprotoco/gettingtoknowrdpmana/policiessettings.md b/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/manual/gettingtoknow/policiessettings.md similarity index 100% rename from docs/endpointpolicymanager/manuals/desktopautomationand/remotedesktopprotoco/gettingtoknowrdpmana/policiessettings.md rename to docs/endpointpolicymanager/components/remotedesktopprotocolmanager/manual/gettingtoknow/policiessettings.md diff --git a/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/manual/overview.md b/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/manual/overview.md new file mode 100644 index 0000000000..d39edb84af --- /dev/null +++ b/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/manual/overview.md @@ -0,0 +1,32 @@ +--- +title: "Remote Desktop Protocol Manager Manual" +description: "Complete manual for Remote Desktop Protocol Manager" +sidebar_position: 1 +--- + +# Remote Desktop Protocol Manager Manual + +This manual covers all aspects of using Remote Desktop Protocol Manager to configure and manage RDP settings across your organization. + +## Getting Started + +### [Getting to Know RDP Manager](./gettingtoknow/) +Learn the basics of Remote Desktop Protocol Manager, including the interface and core concepts. + +### [Configuration](./configuration/) +Advanced configuration options including item-level targeting and process order precedence. + +## Key Topics + +- **RDP Policy Settings** - Configure Remote Desktop Protocol policies +- **Import RDP Files** - Import existing RDP configuration files +- **Item-Level Targeting** - Apply policies to specific users or computers +- **Process Order Precedence** - Understand how multiple policies are processed + +## Quick Links + +- [Main RDP Manager Overview](../overview.md) +- [Videos](../videolearningcenter/) +- [Tech Notes](../knowledgebase/) + +Get started by exploring the [Getting to Know RDP Manager](./gettingtoknow/) section. \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/overview.md b/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/overview.md new file mode 100644 index 0000000000..37ba1069b6 --- /dev/null +++ b/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/overview.md @@ -0,0 +1,37 @@ +--- +title: "Remote Desktop Protocol Manager Overview" +description: "Remote Desktop Protocol Manager allows you to manage RDP settings and configurations" +sidebar_position: 1 +--- + +# Remote Desktop Protocol Manager + +Remote Desktop Protocol Manager enables you to configure and manage Remote Desktop Protocol settings across your organization. + +## Quick Links + +### 📖 [Manual](./manual/) +Complete documentation for using Remote Desktop Protocol Manager: +- **Getting to Know RDP Manager** - Basic concepts and interface +- **Configuration** - Advanced settings and item-level targeting + +### 🎥 [Videos](./videos/) +Video tutorials and demonstrations: +- Getting Started guides +- Configuration methods +- Tips and tricks + +### 🔧 [Tech Notes](./knowledgebase/) +Technical information and troubleshooting: +- Installation guides +- Troubleshooting common issues +- Tips and tricks + +## Key Features + +- Centralized RDP configuration management +- Item-level targeting for precise control +- Integration with Group Policy and MDM +- Support for multiple deployment methods + +Start with the [Manual](./manual/) section to learn the basics, then explore specific topics as needed. diff --git a/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/videolearningcenter/_category_.json b/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/videolearningcenter/_category_.json new file mode 100644 index 0000000000..e683fd5a16 --- /dev/null +++ b/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/videolearningcenter/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Videos", + "position": 3, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/videos/_category_.json b/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/videos/_category_.json new file mode 100644 index 0000000000..c96d7f4f5b --- /dev/null +++ b/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/videos/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Videos", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "videolearningcenter" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/videos/remoteworkandvdi/_category_.json b/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/videos/remoteworkandvdi/_category_.json new file mode 100644 index 0000000000..bfc8ecc3e2 --- /dev/null +++ b/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/videos/remoteworkandvdi/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Remote Work And VDI Scenarios", + "position": 10, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/endpointpolicyrdp/videolearningcenter/remoteworkandvdi/cloud.md b/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/videos/remoteworkandvdi/cloud.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/endpointpolicyrdp/videolearningcenter/remoteworkandvdi/cloud.md rename to docs/endpointpolicymanager/components/remotedesktopprotocolmanager/videos/remoteworkandvdi/cloud.md diff --git a/docs/endpointpolicymanager/knowledgebase/endpointpolicyrdp/videolearningcenter/remoteworkandvdi/itemleveltargeting.md b/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/videos/remoteworkandvdi/itemleveltargeting.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/endpointpolicyrdp/videolearningcenter/remoteworkandvdi/itemleveltargeting.md rename to docs/endpointpolicymanager/components/remotedesktopprotocolmanager/videos/remoteworkandvdi/itemleveltargeting.md diff --git a/docs/endpointpolicymanager/knowledgebase/endpointpolicyrdp/videolearningcenter/remoteworkandvdi/mdm.md b/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/videos/remoteworkandvdi/mdm.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/endpointpolicyrdp/videolearningcenter/remoteworkandvdi/mdm.md rename to docs/endpointpolicymanager/components/remotedesktopprotocolmanager/videos/remoteworkandvdi/mdm.md diff --git a/docs/endpointpolicymanager/knowledgebase/endpointpolicyrdp/videolearningcenter/remoteworkandvdi/vdiscenarios.md b/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/videos/remoteworkandvdi/vdiscenarios.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/endpointpolicyrdp/videolearningcenter/remoteworkandvdi/vdiscenarios.md rename to docs/endpointpolicymanager/components/remotedesktopprotocolmanager/videos/remoteworkandvdi/vdiscenarios.md diff --git a/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/videos/videolearningcenter.md b/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/videos/videolearningcenter.md new file mode 100644 index 0000000000..11c30895ab --- /dev/null +++ b/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/videos/videolearningcenter.md @@ -0,0 +1,16 @@ +--- +title: "Video Learning Center" +description: "Video Learning Center" +sidebar_position: 10 +--- + +# Video Learning Center + +See the following Video topics for Endpoint Policy Manager RDP Manager. + +## Remote Work and VDI Scenarios + +- [Create and update .RDP files for end-users for Remote Work and VDI scenarios](./remoteworkandvdi/vdiscenarios.md) +- [Create and update .RDP files for end-users using Endpoint Policy Manager Cloud Edition](./remoteworkandvdi/cloud.md) +- [Create and update .RDP files for end-users using Endpoint Policy Manager MDM Edition](./remoteworkandvdi/mdm.md) +- [Use Item Level Targeting to Deliver Targeted .RDP Files](./remoteworkandvdi/itemleveltargeting.md) diff --git a/docs/endpointpolicymanager/components/remoteworkdeliverymanager/_category_.json b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/_category_.json new file mode 100644 index 0000000000..6caeb869ad --- /dev/null +++ b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Remote Work Delivery Manager", + "position": 12, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/_category_.json b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/_category_.json new file mode 100644 index 0000000000..e49e37b4ba --- /dev/null +++ b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Manual", + "position": 1, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/cloudmdm.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/cloudmdm.md similarity index 94% rename from docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/cloudmdm.md rename to docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/cloudmdm.md index 8b73880559..7f6477b490 100644 --- a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/cloudmdm.md +++ b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/cloudmdm.md @@ -17,7 +17,7 @@ automatically updated on endpoints. We'll explore both of these options in the f :::note For a video showing how to create and use Endpoint Policy Manager Cloud Lite policies with Endpoint Policy Manager Remote Work Delivery Manager, watch: -[Deploy software with Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/methods/cloud.md). +[Deploy software with Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/methods/cloud.md). ::: @@ -35,7 +35,7 @@ of the policy you just created. :::note See -[Copy files and keep them up to date with your MDM service](/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/methods/mdm.md)for additional +[Copy files and keep them up to date with your MDM service](/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/methods/mdm.md)for additional information on how to use Endpoint Policy Manager Remote Work Delivery Manager and your MDM service to keep files up to date ::: diff --git a/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/exportcollections.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/exportcollections.md new file mode 100644 index 0000000000..448c74565d --- /dev/null +++ b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/exportcollections.md @@ -0,0 +1,57 @@ +--- +title: "Exporting Collections" +description: "Exporting Collections" +sidebar_position: 60 +--- + +# Exporting Collections + +In Appendix A:[Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/uemtools.md), you can +learn how to use the Netwrix Endpoint Policy Manager (formerly PolicyPak) Exporter to wrap up +Endpoint Policy Manager directives and deliver them using Endpoint Policy Manager Cloud, an MDM +service, or a non-Group Policy method such as MEMCM, KACE, and so on. + +:::note +For a video demonstrating the use of Endpoint Policy Manager Remote Work Delivery Manager +with Endpoint Policy Manager MDM see +[Copy files and keep them up to date with your MDM service](/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/methods/mdm.md). +::: + + +Remember that Endpoint Policy Manager Remote Work Delivery Manager policies can be created and +exported on the User side or Computer side. In the example below you can see an export from the User +side. + +![exporting_collections](/images/endpointpolicymanager/remoteworkdelivery/exporting_collections.webp) + +Choosing this option from the User side will allow the user to export the policy or collection for +later use with Endpoint Policy Manager Cloud or an MDM service. + +Below you can see an Export of Endpoint Policy Manager Remote Work Delivery Manager XML from the +Computer side. + +![exporting_collections_1](/images/endpointpolicymanager/remoteworkdelivery/exporting_collections_1.webp) + +Choosing this option from the Computer side will allow the user to export the Policy or collection +for later use with Endpoint Policy Manager Cloud or an MDM service. + +Here are some helpful tips to decide which side to use: + +- When you export a user-side policy and deploy it using Endpoint Policy Manager Cloud or MDM, it + will apply to every user on the machine (like switched mode). +- When you export a computer-side policy (which affects the system) and deploy it using Endpoint + Policy Manager Cloud or MDM, it will apply to the computer as System. +- When you export a computer-side policy (which affects all users on the machine), and deploy it + using Endpoint Policy Manager Cloud or MDM, it will apply to every user on the machine (like + switched mode). + +:::note +See +[Deploying Endpoint Policy Managerdirectives without Group Policy (Endpoint Policy Manager Exporter Utility)](/docs/endpointpolicymanager/deliverymethods/mdm/videos/exportingtips/exporterutility.md) +for additional information on how to export policies and use Endpoint Policy Manager Exporter +::: + + +Note that exported collections or policies maintain any Item-Level Targeting set within them. If +you've used items that represent Group Membership in Active Directory, then those items will only +function when the machine is domain-joined. diff --git a/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/gettoknow/_category_.json b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/gettoknow/_category_.json new file mode 100644 index 0000000000..e3dd134faa --- /dev/null +++ b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/gettoknow/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Getting to Know Remote Work Delivery Manager", + "position": 30, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "gettoknow" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/gettoknow/collections.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/gettoknow/collections.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/gettoknow/collections.md rename to docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/gettoknow/collections.md diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/gettoknow/computerside.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/gettoknow/computerside.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/gettoknow/computerside.md rename to docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/gettoknow/computerside.md diff --git a/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/gettoknow/gettingstarted/_category_.json b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/gettoknow/gettingstarted/_category_.json new file mode 100644 index 0000000000..4a1fa85222 --- /dev/null +++ b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/gettoknow/gettingstarted/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Quick Start - Using Remote Work Delivery Manager to Copy and Install a Single File", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/gettoknow/gettingstarted/overview.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/gettoknow/gettingstarted/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/gettoknow/gettingstarted/overview.md rename to docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/gettoknow/gettingstarted/overview.md diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/gettoknow/gettingstarted/policiesstandard.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/gettoknow/gettingstarted/policiesstandard.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/gettoknow/gettingstarted/policiesstandard.md rename to docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/gettoknow/gettingstarted/policiesstandard.md diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/gettoknow/gettingstarted/policiesweb.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/gettoknow/gettingstarted/policiesweb.md similarity index 97% rename from docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/gettoknow/gettingstarted/policiesweb.md rename to docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/gettoknow/gettingstarted/policiesweb.md index 884aca8962..7bb080b243 100644 --- a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/gettoknow/gettingstarted/policiesweb.md +++ b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/gettoknow/gettingstarted/policiesweb.md @@ -11,7 +11,7 @@ Web policies enable you to copy a file from an HTTP source, like Dropbox or Amaz :::note For a video overview of using Endpoint Policy Manager Remote Work Delivery Manager to install software using web-based shares, see -[Install software using web-based shares](/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/gettingstarted/webbasedshares.md). +[Install software using web-based shares](/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/gettingstarted/webbasedshares.md). ::: diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/gettoknow/gettoknow.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/gettoknow/gettoknow.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/gettoknow/gettoknow.md rename to docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/gettoknow/gettoknow.md diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/gettoknow/multiplefiles.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/gettoknow/multiplefiles.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/gettoknow/multiplefiles.md rename to docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/gettoknow/multiplefiles.md diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/gettoknow/recursion.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/gettoknow/recursion.md similarity index 96% rename from docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/gettoknow/recursion.md rename to docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/gettoknow/recursion.md index 8e05995346..75249ceb9d 100644 --- a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/gettoknow/recursion.md +++ b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/gettoknow/recursion.md @@ -10,7 +10,7 @@ The final standard policy type is Copy multiple files based on criteria (Recursi :::note See -[Mass copy folders and files (with filters and recursion)](/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/gettingstarted/masscopy.md) +[Mass copy folders and files (with filters and recursion)](/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/gettingstarted/masscopy.md) a video overview of Endpoint Policy Manager Remote Work Delivery Manager with Advanced and Recursive options. ::: diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/insouts.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/insouts.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/insouts.md rename to docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/insouts.md diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/itemleveltargeting.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/itemleveltargeting.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/itemleveltargeting.md rename to docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/itemleveltargeting.md diff --git a/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/overview.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/overview.md new file mode 100644 index 0000000000..81239d1e27 --- /dev/null +++ b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/overview.md @@ -0,0 +1,76 @@ +--- +title: "Remote Work Delivery Manager" +description: "Remote Work Delivery Manager" +sidebar_position: 10 +--- + +# Remote Work Delivery Manager + +:::note +Before reading this section, please ensure you have read Book 2: +[Installation Quick Start](/docs/endpointpolicymanager/gettingstarted/overviewinstall/overviewinstall.md), which will help you +learn to do the following: +::: + + +- Install the Admin MSI on your GPMC machine +- Install the CSE on a test Windows machine +- Set up a computer in Trial mode or Licensed mode +- Set up a common OU structure + +Optionally, if you don't want to use Group Policy, read the section in Appendix A: +[Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/uemtools.md) to deploy your +directives. + +Netwrix Endpoint Policy Manager (formerly PolicyPak) Remote Work Delivery Manager (PPRWDM) enables +you to perform the following operations on Windows: + +- Copy files from a server to a client +- Copy files recursively within SMB (standard file share) folders +- Keep files up to date between an SMB share and a desktop or laptop +- Copy files from an HTTP(S) source, like OneDrive, Dropbox, Amazon S3, and some other services, to + a desktop + +:::note +See [Install software with SMB (standard share)](/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/gettingstarted/smb.md)for an +overview of PolicyPak Remote Work Delivery Manager. +::: + + +Endpoint Policy Manager Remote Work Delivery Manager allows you to do the following: + +- Create a rule to express which files, directory, or patterns, should be copied from which SMB + share to a client. +- Create a rule to express which file should be copied from an HTTP(s) source to a client. +- Instead of using the Group Policy method, you can export the Endpoint Policy Manager Remote Work + Delivery Manager rules and deliver them in one of four ways: + + - MEMCM + - Your own systems management software + - An MDM service + - Endpoint Policy Manager Cloud service + +- Allow the client machine with the Endpoint Policy Manager client-side extension (CSE) to embrace + the directives and perform the work. + +:::note +If you use theEndpoint Policy Manager Cloud service, you can deliver Group Policy settings +even to non-domain-joined machines over the Internet. +::: + + +## Moving Parts + +- A management station — The Endpoint Policy Manager Admin Console MSI must be installed on the + management station where you create GPOs. Once it is installed, you'll see the Endpoint Policy + Manager | Endpoint Policy Manager Remote Work Delivery Manager node. +- The Endpoint Policy Manager CSE — This runs on the client (target) machine and is the same CSE for + all Endpoint Policy Manager products. There isn't anything separate to install, and the Endpoint + Policy Manager CSE must be present in order to accept Endpoint Policy Manager Remote Work Delivery + Manager directives via Group Policy, or when using MEMCM, KACE, MDM, or similar utilities. +- Endpoints — In order to use these, they must be licensed for Endpoint Policy Manager Remote Work + Delivery Manager using one of the licensing methods, which are described in Book 1: + [Introduction and Basic Concepts](/docs/endpointpolicymanager/gettingstarted/basicconcepts/basicconcepts.md). +- PolicyPak Exporter (optional) — A free utility that lets you take Endpoint Policy Manager Admin + Templates Manager and our other products' XML files and wrap them into a portable MSI file for + deployment using MEMCM, an MDM service, or your own systems management software. diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/processorderprecedence.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/processorderprecedence.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/processorderprecedence.md rename to docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/processorderprecedence.md diff --git a/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/remoteworkdelivery/_category_.json b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/remoteworkdelivery/_category_.json new file mode 100644 index 0000000000..75c60fcdde --- /dev/null +++ b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/remoteworkdelivery/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Tips, Security, and Troubleshooting", + "position": 80, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/remoteworkdelivery/events.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/remoteworkdelivery/events.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/remoteworkdelivery/events.md rename to docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/remoteworkdelivery/events.md diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/remoteworkdelivery/logs.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/remoteworkdelivery/logs.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/remoteworkdelivery/logs.md rename to docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/remoteworkdelivery/logs.md diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/remoteworkdelivery/overview.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/remoteworkdelivery/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/remoteworkdelivery/overview.md rename to docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/remoteworkdelivery/overview.md diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/remoteworkdelivery/refreshtiming.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/remoteworkdelivery/refreshtiming.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/remoteworkdelivery/refreshtiming.md rename to docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/remoteworkdelivery/refreshtiming.md diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/remoteworkdelivery/securityconcerns.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/remoteworkdelivery/securityconcerns.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/remoteworkdelivery/securityconcerns.md rename to docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/remoteworkdelivery/securityconcerns.md diff --git a/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/remoteworkdelivery/tips/_category_.json b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/remoteworkdelivery/tips/_category_.json new file mode 100644 index 0000000000..3630dccaeb --- /dev/null +++ b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/remoteworkdelivery/tips/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Tips: Wildcards and Variables", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/remoteworkdelivery/tips/overview.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/remoteworkdelivery/tips/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/remoteworkdelivery/tips/overview.md rename to docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/remoteworkdelivery/tips/overview.md diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/remoteworkdelivery/tips/specialvariables.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/remoteworkdelivery/tips/specialvariables.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/remoteworkdelivery/tips/specialvariables.md rename to docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/remoteworkdelivery/tips/specialvariables.md diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/remoteworkdelivery/tips/wildcards.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/remoteworkdelivery/tips/wildcards.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/remoteworkdelivery/tips/wildcards.md rename to docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/remoteworkdelivery/tips/wildcards.md diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/savetime.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/savetime.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/savetime.md rename to docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/savetime.md diff --git a/docs/endpointpolicymanager/components/remoteworkdeliverymanager/overview.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/overview.md new file mode 100644 index 0000000000..51cec6c8ae --- /dev/null +++ b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/overview.md @@ -0,0 +1,41 @@ +--- +title: "Remote Work Delivery Manager Overview" +description: "Remote Work Delivery Manager enables remote software deployment and management" +sidebar_position: 1 +--- + +# Remote Work Delivery Manager + +Remote Work Delivery Manager provides centralized software deployment and management capabilities for remote workers and distributed environments. + +## Quick Links + +### 📖 [Manual](./manual/) +Complete documentation for using Remote Work Delivery Manager: +- **Cloud and MDM Integration** - Deploy via cloud services +- **Export Collections** - Package and distribute software +- **Configuration** - Advanced deployment settings + +### 🎥 [Videos](./videos/) +Video tutorials and demonstrations: +- Getting Started guides +- Mass deployment methods +- SMB and web-based shares +- Cloud integration tutorials + +### 🔧 [Tech Notes](./technotes/) +Technical information and troubleshooting: +- Installation tips and tricks +- Variable usage and configuration +- Troubleshooting common issues +- Sequential installation guides + +## Key Features + +- Centralized software deployment for remote workers +- Cloud and MDM integration capabilities +- Mass copying and distribution tools +- Support for various file share methods +- Integration with Azure Blob Storage and web services + +Start with the [Manual](./manual/) section to learn the basics, then explore specific topics as needed. diff --git a/docs/endpointpolicymanager/components/remoteworkdeliverymanager/technotes/_category_.json b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/technotes/_category_.json new file mode 100644 index 0000000000..94afda5423 --- /dev/null +++ b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/technotes/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Tech Notes", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "knowledgebase" + } +} diff --git a/docs/endpointpolicymanager/components/remoteworkdeliverymanager/technotes/knowledgebase.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/technotes/knowledgebase.md new file mode 100644 index 0000000000..28c5e801b3 --- /dev/null +++ b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/technotes/knowledgebase.md @@ -0,0 +1,21 @@ +--- +title: "Knowledge Base" +description: "Knowledge Base" +sidebar_position: 10 +--- + +# Knowledge Base + +See the following Knowledge Base articles for Remote Work Delivery Manager. + +## Tips and Tricks + +- [How can I make applications install sequentially / in order (and how does it work?)](/docs/endpointpolicymanager/components/remoteworkdeliverymanager/technotes/tipsandtricks/installsequentially.md) +- [How to Install UWP applications using Endpoint Policy Manager Remote Work Delivery Manager](/docs/endpointpolicymanager/components/remoteworkdeliverymanager/technotes/tipsandtricks/installuwp.md) +- [How do I use Endpoint Policy Manager Remote Work Delivery Manager to update the Client Side Extension?](/docs/endpointpolicymanager/components/remoteworkdeliverymanager/technotes/tipsandtricks/updateclientsideextension.md) +- [What variables can I use in place for source or destination in Remote Work Delivery Manager?](/docs/endpointpolicymanager/components/remoteworkdeliverymanager/technotes/tipsandtricks/variables.md) +- [How To deploy a TCP/IP Printer using Endpoint Policy Manager Remote Work Delivery Manager](/docs/endpointpolicymanager/components/remoteworkdeliverymanager/technotes/tipsandtricks/printers.md) + +## Troubleshooting + +- [My Dropbox link won't verify in Remote Work Delivery Manager](/docs/endpointpolicymanager/components/remoteworkdeliverymanager/technotes/troubleshooting/dropboxlink.md) diff --git a/docs/endpointpolicymanager/components/remoteworkdeliverymanager/technotes/tipsandtricks/_category_.json b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/technotes/tipsandtricks/_category_.json new file mode 100644 index 0000000000..303bcb02f6 --- /dev/null +++ b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/technotes/tipsandtricks/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Tips And Tricks", + "position": 10, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/knowledgebase/tipsandtricks/installsequentially.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/technotes/tipsandtricks/installsequentially.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/knowledgebase/tipsandtricks/installsequentially.md rename to docs/endpointpolicymanager/components/remoteworkdeliverymanager/technotes/tipsandtricks/installsequentially.md diff --git a/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/knowledgebase/tipsandtricks/installuwp.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/technotes/tipsandtricks/installuwp.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/knowledgebase/tipsandtricks/installuwp.md rename to docs/endpointpolicymanager/components/remoteworkdeliverymanager/technotes/tipsandtricks/installuwp.md diff --git a/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/knowledgebase/tipsandtricks/printers.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/technotes/tipsandtricks/printers.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/knowledgebase/tipsandtricks/printers.md rename to docs/endpointpolicymanager/components/remoteworkdeliverymanager/technotes/tipsandtricks/printers.md diff --git a/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/knowledgebase/tipsandtricks/updateclientsideextension.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/technotes/tipsandtricks/updateclientsideextension.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/knowledgebase/tipsandtricks/updateclientsideextension.md rename to docs/endpointpolicymanager/components/remoteworkdeliverymanager/technotes/tipsandtricks/updateclientsideextension.md diff --git a/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/knowledgebase/tipsandtricks/variables.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/technotes/tipsandtricks/variables.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/knowledgebase/tipsandtricks/variables.md rename to docs/endpointpolicymanager/components/remoteworkdeliverymanager/technotes/tipsandtricks/variables.md diff --git a/docs/endpointpolicymanager/components/remoteworkdeliverymanager/technotes/troubleshooting/_category_.json b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/technotes/troubleshooting/_category_.json new file mode 100644 index 0000000000..289c6f8855 --- /dev/null +++ b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/technotes/troubleshooting/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Troubleshooting", + "position": 20, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/knowledgebase/troubleshooting/dropboxlink.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/technotes/troubleshooting/dropboxlink.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/knowledgebase/troubleshooting/dropboxlink.md rename to docs/endpointpolicymanager/components/remoteworkdeliverymanager/technotes/troubleshooting/dropboxlink.md diff --git a/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/_category_.json b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/_category_.json new file mode 100644 index 0000000000..9995c360e4 --- /dev/null +++ b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Videos", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "videolearningcenter" + } +} diff --git a/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/gettingstarted/_category_.json b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/gettingstarted/_category_.json new file mode 100644 index 0000000000..7eb735f33a --- /dev/null +++ b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/gettingstarted/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Getting Started", + "position": 10, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/gettingstarted/masscopy.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/gettingstarted/masscopy.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/gettingstarted/masscopy.md rename to docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/gettingstarted/masscopy.md diff --git a/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/gettingstarted/patching.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/gettingstarted/patching.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/gettingstarted/patching.md rename to docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/gettingstarted/patching.md diff --git a/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/gettingstarted/smb.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/gettingstarted/smb.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/gettingstarted/smb.md rename to docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/gettingstarted/smb.md diff --git a/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/gettingstarted/webbasedshares.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/gettingstarted/webbasedshares.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/gettingstarted/webbasedshares.md rename to docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/gettingstarted/webbasedshares.md diff --git a/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/methods/_category_.json b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/methods/_category_.json new file mode 100644 index 0000000000..b6dcc179eb --- /dev/null +++ b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/methods/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Methods Cloud MDM SCCM Etc", + "position": 20, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/methods/cloud.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/methods/cloud.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/methods/cloud.md rename to docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/methods/cloud.md diff --git a/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/methods/mdm.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/methods/mdm.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/methods/mdm.md rename to docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/methods/mdm.md diff --git a/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/tipsandtricks/_category_.json b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/tipsandtricks/_category_.json new file mode 100644 index 0000000000..eccef4c011 --- /dev/null +++ b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/tipsandtricks/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Tips And Tricks", + "position": 30, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/tipsandtricks/azureblobstorage.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/tipsandtricks/azureblobstorage.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/tipsandtricks/azureblobstorage.md rename to docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/tipsandtricks/azureblobstorage.md diff --git a/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/tipsandtricks/localfilecopy.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/tipsandtricks/localfilecopy.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/tipsandtricks/localfilecopy.md rename to docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/tipsandtricks/localfilecopy.md diff --git a/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/tipsandtricks/updateclientsideextension.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/tipsandtricks/updateclientsideextension.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/tipsandtricks/updateclientsideextension.md rename to docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/tipsandtricks/updateclientsideextension.md diff --git a/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/videolearningcenter.md b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/videolearningcenter.md new file mode 100644 index 0000000000..793fa627df --- /dev/null +++ b/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/videolearningcenter.md @@ -0,0 +1,27 @@ +--- +title: "Video Learning Center" +description: "Video Learning Center" +sidebar_position: 20 +--- + +# Video Learning Center + +See the following Video topics for Remote Work Delivery Manager. + +## Getting Started + +- [Install software with SMB (standard share)](/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/gettingstarted/smb.md) +- [Install software using web-based shares](/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/gettingstarted/webbasedshares.md) +- [Mass copy folders and files (with filters and recursion)](/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/gettingstarted/masscopy.md) +- [Automatic Patching and Updates](/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/gettingstarted/patching.md) + +## Methods: Cloud, MDM, SCCM, etc. + +- [Deploy software with Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/methods/cloud.md) +- [Copy files and keep them up to date with your MDM service](/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/methods/mdm.md) + +## Tips and Tricks + +- [Endpoint Policy Manager: Remote Work Delivery Manager Local File Copy Magic](/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/tipsandtricks/localfilecopy.md) +- [Endpoint Policy Manager: Use Azure Blob Storage to Deploy and Patch your software](/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/tipsandtricks/azureblobstorage.md) +- [Using Remote Work Delivery Manager to Update the Endpoint Policy Manager Client Side Extension](/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/tipsandtricks/updateclientsideextension.md) diff --git a/docs/endpointpolicymanager/components/scriptstriggers/_category_.json b/docs/endpointpolicymanager/components/scriptstriggers/_category_.json new file mode 100644 index 0000000000..b3e7cbb66e --- /dev/null +++ b/docs/endpointpolicymanager/components/scriptstriggers/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Scripts and Triggers Manager", + "position": 13, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} diff --git a/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/_category_.json b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/_category_.json new file mode 100644 index 0000000000..f890ea6095 --- /dev/null +++ b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Tech Notes", + "position": 3, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "knowledgebase" + } +} diff --git a/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/installation/_category_.json b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/installation/_category_.json new file mode 100644 index 0000000000..ee3640f7af --- /dev/null +++ b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/installation/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Installation and Uninstallation", + "position": 1, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/knowledgebase.md b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/knowledgebase.md new file mode 100644 index 0000000000..d64e8b527c --- /dev/null +++ b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/knowledgebase.md @@ -0,0 +1,31 @@ +--- +title: Scripts and Triggers Manager Technical Notes +description: Technical documentation for Scripts and Triggers Manager +--- + +# Scripts and Triggers Manager Technical Notes + +Technical documentation for Scripts and Triggers Manager installation, scripting, and troubleshooting. + +## Technical Sections + +- [Installation and Uninstallation](installation) - Setup and deployment procedures +- [Troubleshooting](troubleshooting) - Script debugging and issue resolution +- [Tips and Tricks](tipsandtricks) - Advanced scripting techniques + +## Overview + +Scripts and Triggers Manager provides powerful automation capabilities for enterprise environments. This technical documentation helps administrators implement effective scripting solutions and resolve common issues. + +## Key Technical Areas + +- Script execution contexts and permissions +- Trigger evaluation and timing +- Error handling and logging +- Performance optimization +- Security considerations +- Debugging techniques + +--- + +*Consult the troubleshooting section for script debugging guidance and common issue resolution.* diff --git a/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/_category_.json b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/_category_.json new file mode 100644 index 0000000000..a74978754e --- /dev/null +++ b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Tips and Tricks", + "position": 3, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/bitlockerdeployment.md b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/bitlockerdeployment.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/bitlockerdeployment.md rename to docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/bitlockerdeployment.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/edgefirstlogon.md b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/edgefirstlogon.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/edgefirstlogon.md rename to docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/edgefirstlogon.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/eventlogtriggers.md b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/eventlogtriggers.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/eventlogtriggers.md rename to docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/eventlogtriggers.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/localaccountpassword.md b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/localaccountpassword.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/localaccountpassword.md rename to docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/localaccountpassword.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/localscheduledtask.md b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/localscheduledtask.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/localscheduledtask.md rename to docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/localscheduledtask.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/powershell.md b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/powershell.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/powershell.md rename to docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/powershell.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/processesdetails.md b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/processesdetails.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/processesdetails.md rename to docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/processesdetails.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/resetsecurechannel.md b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/resetsecurechannel.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/resetsecurechannel.md rename to docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/resetsecurechannel.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/screensavers.md b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/screensavers.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/screensavers.md rename to docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/screensavers.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/shortcutpublicdesktop.md b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/shortcutpublicdesktop.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/shortcutpublicdesktop.md rename to docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/shortcutpublicdesktop.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/silentbrowserinstall.md b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/silentbrowserinstall.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/silentbrowserinstall.md rename to docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/silentbrowserinstall.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/teamsminimized.md b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/teamsminimized.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/teamsminimized.md rename to docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/teamsminimized.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/temperatureunit.md b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/temperatureunit.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/temperatureunit.md rename to docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/temperatureunit.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/updateregistry.md b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/updateregistry.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/updateregistry.md rename to docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/updateregistry.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/vpnconnection.md b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/vpnconnection.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/vpnconnection.md rename to docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/vpnconnection.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/windows10modifyscript.md b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/windows10modifyscript.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/windows10modifyscript.md rename to docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/windows10modifyscript.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/wlandropbox.md b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/wlandropbox.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/wlandropbox.md rename to docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/wlandropbox.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/wlannetwork.md b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/wlannetwork.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/wlannetwork.md rename to docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/tipsandtricks/wlannetwork.md diff --git a/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/troubleshooting/_category_.json b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/troubleshooting/_category_.json new file mode 100644 index 0000000000..2a7c1d7f13 --- /dev/null +++ b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/troubleshooting/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Troubleshooting", + "position": 2, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/troubleshooting/adminapproval.md b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/troubleshooting/adminapproval.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/troubleshooting/adminapproval.md rename to docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/troubleshooting/adminapproval.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/troubleshooting/cylance.md b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/troubleshooting/cylance.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/troubleshooting/cylance.md rename to docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/troubleshooting/cylance.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/troubleshooting/onapplyscript.md b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/troubleshooting/onapplyscript.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/troubleshooting/onapplyscript.md rename to docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/troubleshooting/onapplyscript.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/troubleshooting/powershellscripts.md b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/troubleshooting/powershellscripts.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/troubleshooting/powershellscripts.md rename to docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/troubleshooting/powershellscripts.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/troubleshooting/scriptlocation.md b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/troubleshooting/scriptlocation.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/troubleshooting/scriptlocation.md rename to docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/troubleshooting/scriptlocation.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/troubleshooting/systemprocesses.md b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/troubleshooting/systemprocesses.md similarity index 95% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/troubleshooting/systemprocesses.md rename to docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/troubleshooting/systemprocesses.md index c881232e07..8f1a6018e8 100644 --- a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/troubleshooting/systemprocesses.md +++ b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/troubleshooting/systemprocesses.md @@ -7,7 +7,7 @@ sidebar_position: 70 # Why don't Batch and PowerShell scripts get blocked when SYSTEM processes are blocked When implementing SecureRun to block both User and System processes (as demonstrated in -[SecureRun to block User AND System executables](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/usersystemexecutables.md) +[SecureRun to block User AND System executables](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/usersystemexecutables.md) video) we find that EXEs, MSIs and VB scripts get smacked down as expected when running as the USER, ADMIN or SYSTEM account. However, Batch and PowerShell scripts that are started from within a previously opened cmd.exe or powershell.exe window do not get blocked when running as a system diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/troubleshooting/vpn.md b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/troubleshooting/vpn.md similarity index 97% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/troubleshooting/vpn.md rename to docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/troubleshooting/vpn.md index 8db44e905f..f46c1835f0 100644 --- a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/troubleshooting/vpn.md +++ b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/troubleshooting/vpn.md @@ -10,7 +10,7 @@ sidebar_position: 50 - VPN used must be in the list of supported VPNs in the article below. - [Which VPN Solutions are currently supported for use with Scripts Manager VPN Triggers?](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/troubleshooting/vpnsolutions.md) + [Which VPN Solutions are currently supported for use with Scripts Manager VPN Triggers?](/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/troubleshooting/vpnsolutions.md) **Step 1 –** Create a new policy (Set Launch Folder Windows in a Separate Process to Enabled) using Scripts & Triggers on the computer side, choose switched-mode like in the screenshot below. diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/troubleshooting/vpnsolutions.md b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/troubleshooting/vpnsolutions.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/troubleshooting/vpnsolutions.md rename to docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/troubleshooting/vpnsolutions.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/troubleshooting/windows7tls.md b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/troubleshooting/windows7tls.md similarity index 98% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/troubleshooting/windows7tls.md rename to docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/troubleshooting/windows7tls.md index 2f99796905..e103fe7706 100644 --- a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/troubleshooting/windows7tls.md +++ b/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/troubleshooting/windows7tls.md @@ -11,7 +11,7 @@ PolicyPak) and may or may not work for all functions. Pre-read the following to know what is known to NOT work in Windows 7 before continuing: -[How does Endpoint Policy Manager support (and not support) Windows 11?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/gettingstarted/windows11.md) +[How does Endpoint Policy Manager support (and not support) Windows 11?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/gettingstarted/windows11.md) Then after that, if you still wish to use Endpoint Policy Manager with Windows 7 and Endpoint Policy Manager Cloud, you must update Windows 7 to be TLS 1.2 complaint. diff --git a/docs/endpointpolicymanager/components/scriptstriggers/manual/_category_.json b/docs/endpointpolicymanager/components/scriptstriggers/manual/_category_.json new file mode 100644 index 0000000000..1c4c158a37 --- /dev/null +++ b/docs/endpointpolicymanager/components/scriptstriggers/manual/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Manual", + "position": 1, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} diff --git a/docs/endpointpolicymanager/components/scriptstriggers/manual/configuration/_category_.json b/docs/endpointpolicymanager/components/scriptstriggers/manual/configuration/_category_.json new file mode 100644 index 0000000000..231704b45b --- /dev/null +++ b/docs/endpointpolicymanager/components/scriptstriggers/manual/configuration/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Configuration", + "position": 2, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/manuals/desktopautomationand/scriptstriggers/insouts.md b/docs/endpointpolicymanager/components/scriptstriggers/manual/configuration/insouts.md similarity index 100% rename from docs/endpointpolicymanager/manuals/desktopautomationand/scriptstriggers/insouts.md rename to docs/endpointpolicymanager/components/scriptstriggers/manual/configuration/insouts.md diff --git a/docs/endpointpolicymanager/components/scriptstriggers/manual/gettingtoknow/_category_.json b/docs/endpointpolicymanager/components/scriptstriggers/manual/gettingtoknow/_category_.json new file mode 100644 index 0000000000..04d2942591 --- /dev/null +++ b/docs/endpointpolicymanager/components/scriptstriggers/manual/gettingtoknow/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Getting to know Scripts and Triggers Manager", + "position": 1, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/manuals/desktopautomationand/scriptstriggers/advantages.md b/docs/endpointpolicymanager/components/scriptstriggers/manual/gettingtoknow/advantages.md similarity index 100% rename from docs/endpointpolicymanager/manuals/desktopautomationand/scriptstriggers/advantages.md rename to docs/endpointpolicymanager/components/scriptstriggers/manual/gettingtoknow/advantages.md diff --git a/docs/endpointpolicymanager/manuals/desktopautomationand/scriptstriggers/gettoknow/computerside.md b/docs/endpointpolicymanager/components/scriptstriggers/manual/gettingtoknow/computerside.md similarity index 100% rename from docs/endpointpolicymanager/manuals/desktopautomationand/scriptstriggers/gettoknow/computerside.md rename to docs/endpointpolicymanager/components/scriptstriggers/manual/gettingtoknow/computerside.md diff --git a/docs/endpointpolicymanager/manuals/desktopautomationand/scriptstriggers/gettoknow/overview.md b/docs/endpointpolicymanager/components/scriptstriggers/manual/gettingtoknow/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/desktopautomationand/scriptstriggers/gettoknow/overview.md rename to docs/endpointpolicymanager/components/scriptstriggers/manual/gettingtoknow/overview.md diff --git a/docs/endpointpolicymanager/manuals/desktopautomationand/scriptstriggers/overview_1.md b/docs/endpointpolicymanager/components/scriptstriggers/manual/gettingtoknow/overview_1.md similarity index 100% rename from docs/endpointpolicymanager/manuals/desktopautomationand/scriptstriggers/overview_1.md rename to docs/endpointpolicymanager/components/scriptstriggers/manual/gettingtoknow/overview_1.md diff --git a/docs/endpointpolicymanager/manuals/desktopautomationand/scriptstriggers/gettoknow/shortcuts.md b/docs/endpointpolicymanager/components/scriptstriggers/manual/gettingtoknow/shortcuts.md similarity index 100% rename from docs/endpointpolicymanager/manuals/desktopautomationand/scriptstriggers/gettoknow/shortcuts.md rename to docs/endpointpolicymanager/components/scriptstriggers/manual/gettingtoknow/shortcuts.md diff --git a/docs/endpointpolicymanager/manuals/desktopautomationand/scriptstriggers/gettoknow/usage.md b/docs/endpointpolicymanager/components/scriptstriggers/manual/gettingtoknow/usage.md similarity index 97% rename from docs/endpointpolicymanager/manuals/desktopautomationand/scriptstriggers/gettoknow/usage.md rename to docs/endpointpolicymanager/components/scriptstriggers/manual/gettingtoknow/usage.md index 521671d7b6..24324742fe 100644 --- a/docs/endpointpolicymanager/manuals/desktopautomationand/scriptstriggers/gettoknow/usage.md +++ b/docs/endpointpolicymanager/components/scriptstriggers/manual/gettingtoknow/usage.md @@ -13,7 +13,7 @@ Manager scripts and triggers. :::note For an overview of Endpoint Policy Manager scripts and triggers see -[Endpoint Policy Manager Scripts + Triggers: Map a printer or drive when a process runs and un-map it when closed.](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/triggersexamples/mapdrivetriggers.md). +[Endpoint Policy Manager Scripts + Triggers: Map a printer or drive when a process runs and un-map it when closed.](/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/triggersexamples/mapdrivetriggers.md). ::: diff --git a/docs/endpointpolicymanager/components/scriptstriggers/manual/itemleveltargeting/_category_.json b/docs/endpointpolicymanager/components/scriptstriggers/manual/itemleveltargeting/_category_.json new file mode 100644 index 0000000000..dea7223125 --- /dev/null +++ b/docs/endpointpolicymanager/components/scriptstriggers/manual/itemleveltargeting/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Item Level Targeting", + "position": 3, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/components/scriptstriggers/manual/itemleveltargeting/exportcollections.md b/docs/endpointpolicymanager/components/scriptstriggers/manual/itemleveltargeting/exportcollections.md new file mode 100644 index 0000000000..1d3ffbcb09 --- /dev/null +++ b/docs/endpointpolicymanager/components/scriptstriggers/manual/itemleveltargeting/exportcollections.md @@ -0,0 +1,64 @@ +--- +title: "Exporting Collections" +description: "Exporting Collections" +sidebar_position: 20 +--- + +# Exporting Collections + +Appendix A: [Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/uemtools.md) explains +how to use the Endpoint Policy Manager Exporter to wrap up any Endpoint Policy Manager directive and +deliver it using an MDM service such as Microsoft Endpoint Manager (SCCM and Intune), KACE, and so +on, as well as via Endpoint Policy Manager Cloud. + +:::note +For a video demonstrating the use of Endpoint Policy Manager scripts with Endpoint Policy +Manager Cloud and an MDM service see +[Endpoint Policy ManagerScripts .. Deploy Software via VPN or with Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/withcloud/cloud.md) +and +[Endpoint Policy Manager Scripts and YOUR MDM service: Un-real power](/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/methods/mdm.md) +::: + + +Remember that Endpoint Policy Manager Scripts & Triggers Manager policies can be created and +exported on the User or Computer side. For instance, in Figure 30, you can see an export from the +User side. + +![using_item_level_targeting_6](/images/endpointpolicymanager/scriptstriggers/itemleveltargeting/using_item_level_targeting_6.webp) + +Figure 30. Exporting a policy from the User side. + +In Figure 31, you can see an export of a Endpoint Policy Manager Scripts & Triggers Manager XML file +from the Computer side. + +![using_item_level_targeting_7](/images/endpointpolicymanager/scriptstriggers/itemleveltargeting/using_item_level_targeting_7.webp) + +Figure 31. Exporting a collection from the Computer side. + +Here are some helpful tips to decide which side to use: + +- When you export a user-side policy, and deploy it using Endpoint Policy Manager Cloud or MDM, it + will apply to every user on the machine (like switched mode). +- When you export a computer-side policy that affects the system, and deploy it using Endpoint + Policy Manager Cloud or MDM, it will apply to the computer as system. +- When you export a computer-side policy that affect all users on the machine, and deploy it using + Endpoint Policy Manager Cloud or MDM, it will apply to every user on the machine (like switched + mode). + +To export a policy for later use with Endpoint Policy Manager Exporter or Endpoint Policy Manager +Cloud, right-click the collection or the policy and select "Export as XML," as demonstrated in +Figure 32. + +:::note +For a video showing how to export policies and use Endpoint Policy Manager Exporter, watch +[Deploying Endpoint Policy Managerdirectives without Group Policy (Endpoint Policy Manager Exporter Utility)](/docs/endpointpolicymanager/deliverymethods/mdm/videos/exportingtips/exporterutility.md). +::: + + +![using_item_level_targeting_8](/images/endpointpolicymanager/scriptstriggers/itemleveltargeting/using_item_level_targeting_8.webp) + +Figure 32. Choosing this option will allow the user to export the policy for later use. + +Note that exported collections or policies maintain any Item-Level Targeting set within them. If +you've used items that represent Group Membership in Active Directory, then those items will only +function when the machine is domain-joined. diff --git a/docs/endpointpolicymanager/manuals/desktopautomationand/scriptstriggers/itemleveltargeting/overview.md b/docs/endpointpolicymanager/components/scriptstriggers/manual/itemleveltargeting/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/desktopautomationand/scriptstriggers/itemleveltargeting/overview.md rename to docs/endpointpolicymanager/components/scriptstriggers/manual/itemleveltargeting/overview.md diff --git a/docs/endpointpolicymanager/manuals/desktopautomationand/scriptstriggers/itemleveltargeting/processorderprecedence.md b/docs/endpointpolicymanager/components/scriptstriggers/manual/itemleveltargeting/processorderprecedence.md similarity index 100% rename from docs/endpointpolicymanager/manuals/desktopautomationand/scriptstriggers/itemleveltargeting/processorderprecedence.md rename to docs/endpointpolicymanager/components/scriptstriggers/manual/itemleveltargeting/processorderprecedence.md diff --git a/docs/endpointpolicymanager/components/scriptstriggers/manual/overview.md b/docs/endpointpolicymanager/components/scriptstriggers/manual/overview.md new file mode 100644 index 0000000000..1551a4174c --- /dev/null +++ b/docs/endpointpolicymanager/components/scriptstriggers/manual/overview.md @@ -0,0 +1,31 @@ +--- +title: Scripts and Triggers Manager Manual +description: Complete guide to configuring Scripts and Triggers Manager +--- + +# Scripts and Triggers Manager Manual + +This manual provides comprehensive information about Scripts and Triggers Manager, a component that automates script execution based on system events and triggers. + +## Manual Sections + +- [Getting to Know Scripts and Triggers Manager](gettingtoknow) - Overview and basic concepts +- [Configuration](configuration) - Script setup and trigger configuration +- [Item Level Targeting](itemleveltargeting) - Advanced targeting and filtering + +## Overview + +Scripts and Triggers Manager transforms static Group Policy environments into dynamic, responsive systems. By executing scripts automatically based on events and conditions, it enables sophisticated automation scenarios previously requiring complex solutions. + +### Key Benefits + +- **Automation**: Reduce manual administrative tasks +- **Responsiveness**: React to system events in real-time +- **Flexibility**: Support for multiple scripting languages and triggers +- **Targeting**: Execute scripts only for specific users, computers, or conditions + +### Getting Started + +1. Start with [Getting to Know Scripts and Triggers Manager](gettingtoknow) for fundamental concepts +2. Learn [Configuration](configuration) for setting up scripts and triggers +3. Use [Item Level Targeting](itemleveltargeting) for advanced deployment scenarios diff --git a/docs/endpointpolicymanager/components/scriptstriggers/overview.md b/docs/endpointpolicymanager/components/scriptstriggers/overview.md new file mode 100644 index 0000000000..4e80e214a7 --- /dev/null +++ b/docs/endpointpolicymanager/components/scriptstriggers/overview.md @@ -0,0 +1,29 @@ +--- +title: Scripts and Triggers Manager Overview +description: Scripts and Triggers Manager automates script execution based on system events +--- + +# Scripts and Triggers Manager + +Scripts and Triggers Manager is a component of Endpoint Policy Manager (PolicyPak) that allows administrators to automatically execute scripts based on various system triggers and events. This enables powerful automation and customization capabilities. + +## Key Features + +- **Event-Based Automation**: Execute scripts based on system events, user actions, or schedules +- **Multiple Script Types**: Support for PowerShell, VBScript, Batch files, and executables +- **Flexible Triggers**: User logon/logoff, system startup/shutdown, application launch, and more +- **Conditional Execution**: Run scripts only when specific conditions are met +- **Comprehensive Logging**: Track script execution and results + +## Documentation Sections + +- [Manual](manual/) - Configuration guides and scripting reference +- [Videos](videolearningcenter/) - Video tutorials and examples +- [Tech Notes](knowledgebase/) - Technical guidance and troubleshooting + +## Quick Links + +- [Script Configuration](manual/configuration) +- [Getting Started Videos](videolearningcenter/gettingstarted) +- [Trigger Examples](videolearningcenter/triggersexamples) +- [Troubleshooting](knowledgebase/troubleshooting) diff --git a/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/_category_.json b/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/_category_.json new file mode 100644 index 0000000000..08b2b0a69c --- /dev/null +++ b/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Videos", + "position": 2, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "videolearningcenter" + } +} diff --git a/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/gettingstarted/_category_.json b/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/gettingstarted/_category_.json new file mode 100644 index 0000000000..edb57b5129 --- /dev/null +++ b/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/gettingstarted/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Getting Started", + "position": 1, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/gettingstarted/cloud.md b/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/gettingstarted/cloud.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/gettingstarted/cloud.md rename to docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/gettingstarted/cloud.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/gettingstarted/onpremise.md b/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/gettingstarted/onpremise.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/gettingstarted/onpremise.md rename to docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/gettingstarted/onpremise.md diff --git a/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/methods/_category_.json b/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/methods/_category_.json new file mode 100644 index 0000000000..bf3482899d --- /dev/null +++ b/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/methods/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Methods: Cloud, MDM and SCCM", + "position": 2, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/methods/mdm.md b/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/methods/mdm.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/methods/mdm.md rename to docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/methods/mdm.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/methods/pdqdeploy.md b/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/methods/pdqdeploy.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/methods/pdqdeploy.md rename to docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/methods/pdqdeploy.md diff --git a/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/tipsandtricks/_category_.json b/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/tipsandtricks/_category_.json new file mode 100644 index 0000000000..a74978754e --- /dev/null +++ b/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/tipsandtricks/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Tips and Tricks", + "position": 3, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/tipsandtricks/bitlocker.md b/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/tipsandtricks/bitlocker.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/tipsandtricks/bitlocker.md rename to docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/tipsandtricks/bitlocker.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/tipsandtricks/chocolaty.md b/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/tipsandtricks/chocolaty.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/tipsandtricks/chocolaty.md rename to docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/tipsandtricks/chocolaty.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/tipsandtricks/customdefaultfileassociations.md b/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/tipsandtricks/customdefaultfileassociations.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/tipsandtricks/customdefaultfileassociations.md rename to docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/tipsandtricks/customdefaultfileassociations.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/tipsandtricks/printers.md b/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/tipsandtricks/printers.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/tipsandtricks/printers.md rename to docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/tipsandtricks/printers.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/tipsandtricks/unwantedapps.md b/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/tipsandtricks/unwantedapps.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/tipsandtricks/unwantedapps.md rename to docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/tipsandtricks/unwantedapps.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/tipsandtricks/windows10prolockscreen.md b/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/tipsandtricks/windows10prolockscreen.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/tipsandtricks/windows10prolockscreen.md rename to docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/tipsandtricks/windows10prolockscreen.md diff --git a/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/triggersexamples/_category_.json b/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/triggersexamples/_category_.json new file mode 100644 index 0000000000..3f9c57e133 --- /dev/null +++ b/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/triggersexamples/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Triggers Examples", + "position": 4, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/triggersexamples/anyconnect.md b/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/triggersexamples/anyconnect.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/triggersexamples/anyconnect.md rename to docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/triggersexamples/anyconnect.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/triggersexamples/events.md b/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/triggersexamples/events.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/triggersexamples/events.md rename to docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/triggersexamples/events.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/triggersexamples/lockunlocksession.md b/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/triggersexamples/lockunlocksession.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/triggersexamples/lockunlocksession.md rename to docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/triggersexamples/lockunlocksession.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/triggersexamples/mapdrivetriggers.md b/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/triggersexamples/mapdrivetriggers.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/triggersexamples/mapdrivetriggers.md rename to docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/triggersexamples/mapdrivetriggers.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/triggersexamples/scripttriggers.md b/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/triggersexamples/scripttriggers.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/triggersexamples/scripttriggers.md rename to docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/triggersexamples/scripttriggers.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/triggersexamples/shutdownscripts.md b/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/triggersexamples/shutdownscripts.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/triggersexamples/shutdownscripts.md rename to docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/triggersexamples/shutdownscripts.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/triggersexamples/vpnconnect.md b/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/triggersexamples/vpnconnect.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/triggersexamples/vpnconnect.md rename to docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/triggersexamples/vpnconnect.md diff --git a/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/videolearningcenter.md b/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/videolearningcenter.md new file mode 100644 index 0000000000..9d1b28d620 --- /dev/null +++ b/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/videolearningcenter.md @@ -0,0 +1,34 @@ +--- +title: Scripts and Triggers Manager Videos +description: Video tutorials for Scripts and Triggers Manager +--- + +# Scripts and Triggers Manager Video Learning Center + +Learn Scripts and Triggers Manager through comprehensive video tutorials covering scripting, triggers, and automation scenarios. + +## Video Categories + +- [Getting Started](gettingstarted) - Basic concepts and first scripts +- [Methods: Cloud, MDM and SCCM](methods) - Deployment across different platforms +- [Tips and Tricks](tipsandtricks) - Advanced techniques and best practices +- [Triggers Examples](triggersexamples) - Real-world trigger scenarios and scripts +- [With Cloud](withcloud) - Cloud-specific implementations and considerations + +## Featured Topics + +### Getting Started +Essential videos for administrators new to Scripts and Triggers Manager, covering basic concepts and creating your first automated scripts. + +### Deployment Methods +Learn how to deploy Scripts and Triggers Manager using various enterprise platforms including traditional Group Policy, MDM, and Cloud management. + +### Advanced Examples +Real-world examples of trigger scenarios including user logon automation, application-specific scripts, and system maintenance tasks. + +### Cloud Integration +Specialized guidance for implementing Scripts and Triggers Manager in cloud environments and hybrid scenarios. + +--- + +*All videos include practical examples and downloadable sample scripts.* diff --git a/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/withcloud/_category_.json b/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/withcloud/_category_.json new file mode 100644 index 0000000000..00cf3c2306 --- /dev/null +++ b/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/withcloud/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "With Cloud", + "position": 5, + "collapsed": true, + "collapsible": true +} diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/withcloud/auditpol.md b/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/withcloud/auditpol.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/withcloud/auditpol.md rename to docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/withcloud/auditpol.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/withcloud/cloud.md b/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/withcloud/cloud.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/withcloud/cloud.md rename to docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/withcloud/cloud.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/withcloud/printersetup.md b/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/withcloud/printersetup.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/withcloud/printersetup.md rename to docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/withcloud/printersetup.md diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/withcloud/x509certificates.md b/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/withcloud/x509certificates.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/withcloud/x509certificates.md rename to docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/withcloud/x509certificates.md diff --git a/docs/endpointpolicymanager/components/securitysettingsmanager/_category_.json b/docs/endpointpolicymanager/components/securitysettingsmanager/_category_.json new file mode 100644 index 0000000000..1c6f73b736 --- /dev/null +++ b/docs/endpointpolicymanager/components/securitysettingsmanager/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Security Settings Manager", + "position": 14, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/securitysettingsmanager/manual/_category_.json b/docs/endpointpolicymanager/components/securitysettingsmanager/manual/_category_.json new file mode 100644 index 0000000000..20ca7992c8 --- /dev/null +++ b/docs/endpointpolicymanager/components/securitysettingsmanager/manual/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Manual", + "position": 1, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/securitysettings/exportwizard.md b/docs/endpointpolicymanager/components/securitysettingsmanager/manual/exportwizard.md similarity index 97% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/securitysettings/exportwizard.md rename to docs/endpointpolicymanager/components/securitysettingsmanager/manual/exportwizard.md index 67c2df535d..b4d10331fa 100644 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/securitysettings/exportwizard.md +++ b/docs/endpointpolicymanager/components/securitysettingsmanager/manual/exportwizard.md @@ -48,4 +48,4 @@ location and filename to save your XML file. Keep this file handy since you'll use it with Endpoint Policy Manager Exporter or Endpoint Policy Manager Cloud. To learn more about how to deliver settings outside of Group Policy, be sure to read -Appendix A, [Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/uemtools.md). +Appendix A, [Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/uemtools.md). diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/securitysettings/gettoknow.md b/docs/endpointpolicymanager/components/securitysettingsmanager/manual/gettoknow.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appsbrowsersandjavas/securitysettings/gettoknow.md rename to docs/endpointpolicymanager/components/securitysettingsmanager/manual/gettoknow.md diff --git a/docs/endpointpolicymanager/components/securitysettingsmanager/manual/overview.md b/docs/endpointpolicymanager/components/securitysettingsmanager/manual/overview.md new file mode 100644 index 0000000000..c3568eb4da --- /dev/null +++ b/docs/endpointpolicymanager/components/securitysettingsmanager/manual/overview.md @@ -0,0 +1,61 @@ +--- +title: "Security Settings Manager" +description: "Security Settings Manager" +sidebar_position: 40 +--- + +# Security Settings Manager + +:::note +Before reading this section, please ensure you have read Book 2: +[Installation Quick Start](/docs/endpointpolicymanager/gettingstarted/overviewinstall/overviewinstall.md), which will help you +learn to do the following: +::: + + +- Install the Admin MSI on your GPMC machine +- Install the CSE on a test Windows machine +- Set up a computer in Trial mode or Licensed mode +- Set up a common OU structure + +Optionally, if you don't want to use Group Policy, read the section in Appendix A: +[Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/uemtools.md) to deploy your +directives. + +Netwrix Endpoint Policy Manager (formerly PolicyPak) Security Settings Manager enables +administrators to harness the power of Microsoft's existing security settings and deliver those +settings without Group Policy (via Microsoft Endpoint Manager [SCCM], KACE, or Endpoint Policy +Manager Cloud). The supported Microsoft security settings can be seen below.  Red lines indicate +these items are not supported by Endpoint Policy Manager. + +![about_policypak_security_settings](/images/endpointpolicymanager/securitysettings/about_endpointpolicymanager_security_settings.webp) + +:::note +The following items are NOT supported by Endpoint Policy Manager Security Settings +Manager: +::: + + +- IP Security +- Wired network (IEEE 802.3) policies +- Wireless network (IEEE 802.11) policies +- Advanced audit policies + +## Moving Parts + +Endpoint Policy Manager Security Settings Manager has the following components: + +- A management station — To start, create a standard Group Policy Object (GPO), editing it with the + security settings you want (**Computer Configuration** **>** **Policies | Security**). Then use + the **Endpoint Policy Manager** **>** **Endpoint Policy Manager Security Settings Manager** node. +- The Endpoint Policy Manager client-side extension (CSE) — This runs on the client (target) + machine. It is the same CSE for all Endpoint Policy Manager products. There isn't anything + separate to install, and the Endpoint Policy Manager CSE must be present in order to accept + Endpoint Policy Manager Security Settings Manager directives when using Microsoft Endpoint Manager + (SCCM and Intune), KACE, similar utilities, or Endpoint Policy Manager Cloud. +- Endpoints — Endpoints must be licensed for Endpoint Policy Manager Security Settings Manager using + one of the licensing methods. +- Endpoint Policy Manager Exporter (optional) — This is a free utility that lets you take Endpoint + Policy Manager Admin Templates Manager and other Endpoint Policy Manager products' XML files and + wrap them into a portable MSI file for deployment using Microsoft Endpoint Manager (SCCM and + Intune), a mobile device management service, or your own systems management software. diff --git a/docs/endpointpolicymanager/components/securitysettingsmanager/overview.md b/docs/endpointpolicymanager/components/securitysettingsmanager/overview.md new file mode 100644 index 0000000000..63fb3dc553 --- /dev/null +++ b/docs/endpointpolicymanager/components/securitysettingsmanager/overview.md @@ -0,0 +1,17 @@ +--- +title: "Security Settings Manager Overview" +description: "Security Settings Manager enables deployment of Windows security settings" +sidebar_position: 1 +--- + +# Security Settings Manager + +Security Settings Manager enables administrators to harness the power of Microsoft's existing security settings and deliver those settings without Group Policy via Microsoft Endpoint Manager (SCCM), KACE, or Endpoint Policy Manager Cloud. + +## Quick Links + +### 📖 [Manual](./manual/) +Complete documentation for using Security Settings Manager: +- **Overview** - Getting started with security settings +- **Export Wizard** - Exporting security settings for deployment +- **Configuration** - Advanced security settings configuration \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/softwarepackage/_category_.json b/docs/endpointpolicymanager/components/softwarepackage/_category_.json new file mode 100644 index 0000000000..6c7f0ed99a --- /dev/null +++ b/docs/endpointpolicymanager/components/softwarepackage/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Software Package Manager", + "position": 15, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/softwarepackage/manual/_category_.json b/docs/endpointpolicymanager/components/softwarepackage/manual/_category_.json new file mode 100644 index 0000000000..cd6b8d995f --- /dev/null +++ b/docs/endpointpolicymanager/components/softwarepackage/manual/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Manual", + "position": 5, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/softwarepackage/manual/appx/_category_.json b/docs/endpointpolicymanager/components/softwarepackage/manual/appx/_category_.json new file mode 100644 index 0000000000..67f6682c82 --- /dev/null +++ b/docs/endpointpolicymanager/components/softwarepackage/manual/appx/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "AppX Policies and Settings", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/softwarepackage/appx/addremovepackages.md b/docs/endpointpolicymanager/components/softwarepackage/manual/appx/addremovepackages.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appdeliveryandpatchi/softwarepackage/appx/addremovepackages.md rename to docs/endpointpolicymanager/components/softwarepackage/manual/appx/addremovepackages.md diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/softwarepackage/appx/helpertool.md b/docs/endpointpolicymanager/components/softwarepackage/manual/appx/helpertool.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appdeliveryandpatchi/softwarepackage/appx/helpertool.md rename to docs/endpointpolicymanager/components/softwarepackage/manual/appx/helpertool.md diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/softwarepackage/appx/installpackage.md b/docs/endpointpolicymanager/components/softwarepackage/manual/appx/installpackage.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appdeliveryandpatchi/softwarepackage/appx/installpackage.md rename to docs/endpointpolicymanager/components/softwarepackage/manual/appx/installpackage.md diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/softwarepackage/appx/overview.md b/docs/endpointpolicymanager/components/softwarepackage/manual/appx/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appdeliveryandpatchi/softwarepackage/appx/overview.md rename to docs/endpointpolicymanager/components/softwarepackage/manual/appx/overview.md diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/softwarepackage/appx/removepackage.md b/docs/endpointpolicymanager/components/softwarepackage/manual/appx/removepackage.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appdeliveryandpatchi/softwarepackage/appx/removepackage.md rename to docs/endpointpolicymanager/components/softwarepackage/manual/appx/removepackage.md diff --git a/docs/endpointpolicymanager/components/softwarepackage/manual/exportcollections.md b/docs/endpointpolicymanager/components/softwarepackage/manual/exportcollections.md new file mode 100644 index 0000000000..4e354885fb --- /dev/null +++ b/docs/endpointpolicymanager/components/softwarepackage/manual/exportcollections.md @@ -0,0 +1,23 @@ +--- +title: "Exporting Collections" +description: "Exporting Collections" +sidebar_position: 40 +--- + +# Exporting Collections + +Appendix A: [Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/uemtools.md) explains how +to use the Netwrix Endpoint Policy Manager (formerly PolicyPak) Exporter to wrap up any Endpoint +Policy Manager directives and deliver them using Microsoft Endpoint Manager (SCCM and Intune), KACE, +your own MDM service, or Endpoint Policy Manager Cloud. + +To export a policy for later use using Endpoint Policy Manager Exporter or Endpoint Policy Manager +Cloud, right-click the collection or the policy and select **Export to XML**. This will enable you +to save an XML file, which you can use later. + +![exporting_collections](/images/endpointpolicymanager/softwarepackage/exporting_collections.webp) + +Remember that Endpoint Policy Manager RDP policies can be created and exported on the User or +Computer side. For instance, below you can see an item being exported from the Computer side. + +![exporting_collections_1](/images/endpointpolicymanager/softwarepackage/exporting_collections_1.webp) diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/softwarepackage/itemleveltargeting.md b/docs/endpointpolicymanager/components/softwarepackage/manual/itemleveltargeting.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appdeliveryandpatchi/softwarepackage/itemleveltargeting.md rename to docs/endpointpolicymanager/components/softwarepackage/manual/itemleveltargeting.md diff --git a/docs/endpointpolicymanager/components/softwarepackage/manual/overview.md b/docs/endpointpolicymanager/components/softwarepackage/manual/overview.md new file mode 100644 index 0000000000..4fe2021361 --- /dev/null +++ b/docs/endpointpolicymanager/components/softwarepackage/manual/overview.md @@ -0,0 +1,23 @@ +--- +title: "Software Package Manager" +description: "Software Package Manager" +sidebar_position: 20 +--- + +# Software Package Manager + +Netwrix Endpoint Policy Manager (formerly PolicyPak) Software Package Manager enables you to deliver +or remove pre-packaged software. The only type of supported software you can deliver or remove is +Microsoft Store applications, also known as UWP (Universal Windows Platform applications), or AppX +packages. + +For AppX packages, you can do the following with Software Package Manager: + +- Remove unwanted games like Candy Crush Saga or some built-in applications like Skype. +- Deploy applications from the Microsoft Store like Slack, Netflix, or Power BI. +- Work with Endpoint Policy Manager Least Privilege Manager to tighten down specifically which + Windows applications can and cannot run. + +Watch this video for an overview of See Endpoint Policy Manager Software Package Manager: +[Endpoint Policy Manager Software Package Manager: AppX Manager](/docs/endpointpolicymanager/components/softwarepackage/videos/appxpoliciesitems/appxmanager.md) +for additional information. diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/softwarepackage/processorderprecedence.md b/docs/endpointpolicymanager/components/softwarepackage/manual/processorderprecedence.md similarity index 100% rename from docs/endpointpolicymanager/manuals/appdeliveryandpatchi/softwarepackage/processorderprecedence.md rename to docs/endpointpolicymanager/components/softwarepackage/manual/processorderprecedence.md diff --git a/docs/endpointpolicymanager/components/softwarepackage/technotes/_category_.json b/docs/endpointpolicymanager/components/softwarepackage/technotes/_category_.json new file mode 100644 index 0000000000..d50e383b71 --- /dev/null +++ b/docs/endpointpolicymanager/components/softwarepackage/technotes/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Tech Notes", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "knowledgebase" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/softwarepackage/technotes/gettingstarted/_category_.json b/docs/endpointpolicymanager/components/softwarepackage/technotes/gettingstarted/_category_.json new file mode 100644 index 0000000000..7eb735f33a --- /dev/null +++ b/docs/endpointpolicymanager/components/softwarepackage/technotes/gettingstarted/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Getting Started", + "position": 10, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/softwarepackage/knowledgebase/gettingstarted/winget.md b/docs/endpointpolicymanager/components/softwarepackage/technotes/gettingstarted/winget.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/softwarepackage/knowledgebase/gettingstarted/winget.md rename to docs/endpointpolicymanager/components/softwarepackage/technotes/gettingstarted/winget.md diff --git a/docs/endpointpolicymanager/components/softwarepackage/technotes/knowledgebase.md b/docs/endpointpolicymanager/components/softwarepackage/technotes/knowledgebase.md new file mode 100644 index 0000000000..7d8a2c09b0 --- /dev/null +++ b/docs/endpointpolicymanager/components/softwarepackage/technotes/knowledgebase.md @@ -0,0 +1,13 @@ +--- +title: "Knowledge Base" +description: "Knowledge Base" +sidebar_position: 10 +--- + +# Knowledge Base + +See the following Knowledge Base article for Software Package Manager. + +## Getting Started + +- [How to install WinGet on a server that you are using as a management station (unsupported)?](/docs/endpointpolicymanager/components/softwarepackage/technotes/gettingstarted/winget.md) diff --git a/docs/endpointpolicymanager/components/softwarepackage/videos/_category_.json b/docs/endpointpolicymanager/components/softwarepackage/videos/_category_.json new file mode 100644 index 0000000000..77675c0c90 --- /dev/null +++ b/docs/endpointpolicymanager/components/softwarepackage/videos/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Videos", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "videolearningcenter" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/softwarepackage/videos/appxpoliciesitems/_category_.json b/docs/endpointpolicymanager/components/softwarepackage/videos/appxpoliciesitems/_category_.json new file mode 100644 index 0000000000..87775cc7bf --- /dev/null +++ b/docs/endpointpolicymanager/components/softwarepackage/videos/appxpoliciesitems/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "AppX Policies Items For AppX", + "position": 10, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/appxpoliciesitems/appxmanager.md b/docs/endpointpolicymanager/components/softwarepackage/videos/appxpoliciesitems/appxmanager.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/appxpoliciesitems/appxmanager.md rename to docs/endpointpolicymanager/components/softwarepackage/videos/appxpoliciesitems/appxmanager.md diff --git a/docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/appxpoliciesitems/blockapps.md b/docs/endpointpolicymanager/components/softwarepackage/videos/appxpoliciesitems/blockapps.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/appxpoliciesitems/blockapps.md rename to docs/endpointpolicymanager/components/softwarepackage/videos/appxpoliciesitems/blockapps.md diff --git a/docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/appxpoliciesitems/removeapps.md b/docs/endpointpolicymanager/components/softwarepackage/videos/appxpoliciesitems/removeapps.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/appxpoliciesitems/removeapps.md rename to docs/endpointpolicymanager/components/softwarepackage/videos/appxpoliciesitems/removeapps.md diff --git a/docs/endpointpolicymanager/components/softwarepackage/videos/tipsandtricks/_category_.json b/docs/endpointpolicymanager/components/softwarepackage/videos/tipsandtricks/_category_.json new file mode 100644 index 0000000000..eccef4c011 --- /dev/null +++ b/docs/endpointpolicymanager/components/softwarepackage/videos/tipsandtricks/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Tips And Tricks", + "position": 30, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/tipsandtricks/extrastool.md b/docs/endpointpolicymanager/components/softwarepackage/videos/tipsandtricks/extrastool.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/tipsandtricks/extrastool.md rename to docs/endpointpolicymanager/components/softwarepackage/videos/tipsandtricks/extrastool.md diff --git a/docs/endpointpolicymanager/components/softwarepackage/videos/usingwithothermethod/_category_.json b/docs/endpointpolicymanager/components/softwarepackage/videos/usingwithothermethod/_category_.json new file mode 100644 index 0000000000..d121c14f5f --- /dev/null +++ b/docs/endpointpolicymanager/components/softwarepackage/videos/usingwithothermethod/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Using With Other METHODS Cloud MDM Etc", + "position": 40, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/usingwithothermethod/mdm.md b/docs/endpointpolicymanager/components/softwarepackage/videos/usingwithothermethod/mdm.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/usingwithothermethod/mdm.md rename to docs/endpointpolicymanager/components/softwarepackage/videos/usingwithothermethod/mdm.md diff --git a/docs/endpointpolicymanager/components/softwarepackage/videos/videolearningcenter.md b/docs/endpointpolicymanager/components/softwarepackage/videos/videolearningcenter.md new file mode 100644 index 0000000000..933da4d221 --- /dev/null +++ b/docs/endpointpolicymanager/components/softwarepackage/videos/videolearningcenter.md @@ -0,0 +1,28 @@ +--- +title: "Video Learning Center" +description: "Video Learning Center" +sidebar_position: 20 +--- + +# Video Learning Center + +See the following Video topics for Software Package Manager. + +## AppX policies Items for AppX + +- [Endpoint Policy Manager Software Package Manager: AppX Manager](/docs/endpointpolicymanager/components/softwarepackage/videos/appxpoliciesitems/appxmanager.md) +- [Endpoint Policy Manager: Remove built-in Windows 10 / 11 apps (including those in-the-box) included with Windows!](/docs/endpointpolicymanager/components/softwarepackage/videos/appxpoliciesitems/removeapps.md) +- [Endpoint Policy Manager Software Package Manager PLUS Least Privilege Manager: Block any unwanted store apps !](/docs/endpointpolicymanager/components/softwarepackage/videos/appxpoliciesitems/blockapps.md) + +## WinGet policies + +- [Software Package Manager + Deploying Applications via WinGet](/docs/endpointpolicymanager/components/softwarepackage/videos/wingetpolicies/deployapplications.md) +- [Endpoint Policy Manager and WinGet-Run](/docs/endpointpolicymanager/components/softwarepackage/videos/wingetpolicies/run.md) + +## Tips and Tricks + +- [Software Package Manager - Extras Tool](/docs/endpointpolicymanager/components/softwarepackage/videos/tipsandtricks/extrastool.md) + +## Using with other METHODS (Cloud, MDM, etc.) + +- [Endpoint Policy Package Manager (AppX Policies): Add or Remove Microsoft Store using your MDM service.](/docs/endpointpolicymanager/components/softwarepackage/videos/usingwithothermethod/mdm.md) diff --git a/docs/endpointpolicymanager/components/softwarepackage/videos/wingetpolicies/_category_.json b/docs/endpointpolicymanager/components/softwarepackage/videos/wingetpolicies/_category_.json new file mode 100644 index 0000000000..d66753d485 --- /dev/null +++ b/docs/endpointpolicymanager/components/softwarepackage/videos/wingetpolicies/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "WinGet Policies", + "position": 20, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/wingetpolicies/deployapplications.md b/docs/endpointpolicymanager/components/softwarepackage/videos/wingetpolicies/deployapplications.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/wingetpolicies/deployapplications.md rename to docs/endpointpolicymanager/components/softwarepackage/videos/wingetpolicies/deployapplications.md diff --git a/docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/wingetpolicies/run.md b/docs/endpointpolicymanager/components/softwarepackage/videos/wingetpolicies/run.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/wingetpolicies/run.md rename to docs/endpointpolicymanager/components/softwarepackage/videos/wingetpolicies/run.md diff --git a/docs/endpointpolicymanager/components/startscreenandtaskbar/_category_.json b/docs/endpointpolicymanager/components/startscreenandtaskbar/_category_.json new file mode 100644 index 0000000000..f6cc4b7c4b --- /dev/null +++ b/docs/endpointpolicymanager/components/startscreenandtaskbar/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Start Screen And Task Bar Manager", + "position": 16, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/_category_.json b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/_category_.json new file mode 100644 index 0000000000..cd6b8d995f --- /dev/null +++ b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Manual", + "position": 5, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/collectionssettingsi/_category_.json b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/collectionssettingsi/_category_.json new file mode 100644 index 0000000000..f0e03818c4 --- /dev/null +++ b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/collectionssettingsi/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Collections, Policy Settings, and Item-Level Targeting", + "position": 50, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "collectionssettingsilt" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/collectionssettingsi/collectionssettingsilt.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/collectionssettingsi/collectionssettingsilt.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/collectionssettingsi/collectionssettingsilt.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/manual/collectionssettingsi/collectionssettingsilt.md diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/collectionssettingsi/expectedbehavior.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/collectionssettingsi/expectedbehavior.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/collectionssettingsi/expectedbehavior.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/manual/collectionssettingsi/expectedbehavior.md diff --git a/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/collectionssettingsi/exportcollections.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/collectionssettingsi/exportcollections.md new file mode 100644 index 0000000000..da16a348c7 --- /dev/null +++ b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/collectionssettingsi/exportcollections.md @@ -0,0 +1,51 @@ +--- +title: "Exporting Collections" +description: "Exporting Collections" +sidebar_position: 50 +--- + +# Exporting Collections + +Appendix A: [Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/uemtools.md) explains how +to use the Endpoint Policy Manager Exporter to wrap up any Endpoint Policy Manager directive and +deliver it using Microsoft Endpoint Manager (SCCM and Intune), KACE, your own MDM service, or +Endpoint Policy Manager Cloud. For Endpoint Policy Manager Cloud, you should automatically acquire a +license as seen in Figure 50. For Endpoint Policy Manager with an MDM service, the license should +come in your MSI license bundle. + +![collections_policy_settings_17](/images/endpointpolicymanager/startscreentaskbar/collections_policy_settings_17.webp) + +Figure 50. Endpoint Policy Manager Cloud customers are licensed for Endpoint Policy Manager Start +Screen & Taskbar Manager. + +:::note +For a video demonstrating the use of Endpoint Policy Manager Cloud with Endpoint Policy +Manager Start Screen & Taskbar Manager, see +[Endpoint Policy ManagerStart Screen & Taskbar Manager: Manage non-domain joined machines using Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/methods/nondomainjoined.md). +::: + + +To export a policy for later use with Endpoint Policy Manager Exporter or Endpoint Policy Manager +Cloud, right-click the Start Screen Manager node, or a collection, and select "Export Collections as +XML," as demonstrated in Figure 51 and Figure 52. + +:::note +For a video of exporting Endpoint Policy Manager Start Screen & Taskbar Manager and using +Endpoint Policy Manager Exporter with an MDM service, watch +[Endpoint Policy Manager and MDM walk before you run](/docs/endpointpolicymanager/deliverymethods/mdm/videos/gettingstarted/testsample.md). +::: + + +![collections_policy_settings_18](/images/endpointpolicymanager/startscreentaskbar/collections_policy_settings_18.webp) + +Figure 51. Exporting all collections for later use. + +![collections_policy_settings_19](/images/endpointpolicymanager/startscreentaskbar/collections_policy_settings_19.webp) + +Figure 52. Exporting the policy for later use. + +Note that exported collections or policies maintain any Item-Level Targeting set within them. If +you've used items that represent Group Membership in Active Directory, then those items will only +function when the machine is domain-joined. For more information about exporting settings and using +Endpoint Policy Manager Exporter utility, see Appendix A: +[Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/uemtools.md). diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/collectionssettingsi/processorderprecedence.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/collectionssettingsi/processorderprecedence.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/collectionssettingsi/processorderprecedence.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/manual/collectionssettingsi/processorderprecedence.md diff --git a/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/collectionssettingsi/startscreen/_category_.json b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/collectionssettingsi/startscreen/_category_.json new file mode 100644 index 0000000000..980c663b4b --- /dev/null +++ b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/collectionssettingsi/startscreen/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Start Screen Manager Settings", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/collectionssettingsi/startscreen/groupaction.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/collectionssettingsi/startscreen/groupaction.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/collectionssettingsi/startscreen/groupaction.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/manual/collectionssettingsi/startscreen/groupaction.md diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/collectionssettingsi/startscreen/overview.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/collectionssettingsi/startscreen/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/collectionssettingsi/startscreen/overview.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/manual/collectionssettingsi/startscreen/overview.md diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/collectionssettingsi/startscreen/placeholder.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/collectionssettingsi/startscreen/placeholder.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/collectionssettingsi/startscreen/placeholder.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/manual/collectionssettingsi/startscreen/placeholder.md diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/collectionssettingsi/taskbar.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/collectionssettingsi/taskbar.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/collectionssettingsi/taskbar.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/manual/collectionssettingsi/taskbar.md diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/gettoknow.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/gettoknow.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/gettoknow.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/manual/gettoknow.md diff --git a/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/helperutility.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/helperutility.md new file mode 100644 index 0000000000..99639695d7 --- /dev/null +++ b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/helperutility.md @@ -0,0 +1,64 @@ +--- +title: "Using the Helper Utility" +description: "Using the Helper Utility" +sidebar_position: 60 +--- + +# Using the Helper Utility + +In the Start Screen & Taskbar Manager Quickstart examples, we recommended that your management +station have the same applications as your target computers, but sometimes that is not practical. +For instance, someone in the Sales department may be the only one who has the "Sales Application +123" desktop application or "Mega Player" UWP installed. Or there could be other instances where you +don't want to install an application on your machine just for the sake of getting it into the Start +Screen or Taskbar. That's where the Start Screen & Taskbar Manager Helper utility comes in. You can +run the Start Screen & Taskbar Manager utility on an endpoint with the application already +installed; however, you should make sure it is one you want to associate a policy with later. + +:::note +For a video overview demonstrating the use of the Start Screen & Taskbar Manager Helper +utility, watch this video: +[Endpoint Policy Manager Start Screen and Taskbar Manager Helper Utility](/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/gettingstarted/helperutility.md) +::: + + +The Start Screen & Taskbar Manager Helper utility is found in the Netwrix Endpoint Policy Manager +(formerly PolicyPak) ISO or ZIP download in the PolicyPak Extras folder, as seen in Figure 53. + +![using_the_helper_utility](/images/endpointpolicymanager/startscreentaskbar/using_the_helper_utility.webp) + +Figure 53. The Start Screen & Taskbar Manager Helper utility is located in the Extras folder. + +**Step 1 –** When you run the wizard you can choose whether to export registered (desktop) +applications or universal (UWP) applications, as shown in Figure 54. + +![using_the_helper_utility_1](/images/endpointpolicymanager/startscreentaskbar/using_the_helper_utility_1.webp) + +Figure 54. The PolicyPak Start Screen & Taskbar Manager Helper utility lets you export registered +and UWP applications. + +**Step 2 –** Then on the "Select registered programs" page, shown in Figure 55, you can leave the +default settings as they are and click "Next." + +![using_the_helper_utility_2](/images/endpointpolicymanager/startscreentaskbar/using_the_helper_utility_2.webp) + +Figure 55. The default settings to select all registered applications on the endpoint. + +**Step 3 –** Then on the next screen, shown in Figure 56, you can export the IDs for all the UWP +applications on a machine and click "Next." + +![using_the_helper_utility_3](/images/endpointpolicymanager/startscreentaskbar/using_the_helper_utility_3.webp) + +Figure 56. The defaults to select all UWP applications on the endpoint. + +**Step 4 –** Finally, you can export the XML to a file to be used on your management station/GPMC +machine. On your GPMC machine, as you're creating new PolicyPak Start Screen or PolicyPak Taskbar +Manager policies, you can then import from the XML file, as shown in Figure 57. + +![using_the_helper_utility_4](/images/endpointpolicymanager/startscreentaskbar/using_the_helper_utility_4.webp) + +Figure 57. On the management station you can import from the XML file. + +At this point, your list will change to what was imported from the XML file. This process means you +don't need to install the actual application on your machine to deliver Endpoint Policy Manager +Start Screen or Endpoint Policy Manager Taskbar Manager policies. diff --git a/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/insouts/_category_.json b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/insouts/_category_.json new file mode 100644 index 0000000000..c013e145db --- /dev/null +++ b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/insouts/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Ins and Outs", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/insouts/advantages.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/insouts/advantages.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/insouts/advantages.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/manual/insouts/advantages.md diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/insouts/overview.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/insouts/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/insouts/overview.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/manual/insouts/overview.md diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/insouts/windows10.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/insouts/windows10.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/insouts/windows10.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/manual/insouts/windows10.md diff --git a/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/overview.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/overview.md new file mode 100644 index 0000000000..42c50eb2d6 --- /dev/null +++ b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/overview.md @@ -0,0 +1,77 @@ +--- +title: "Start Screen & Taskbar Manager" +description: "Start Screen & Taskbar Manager" +sidebar_position: 30 +--- + +# Start Screen & Taskbar Manager + +:::note +Before reading this section, please ensure you have read +[Installation Quick Start](/docs/endpointpolicymanager/gettingstarted/overviewinstall/overviewinstall.md), which will help you +learn to do the following: +::: + + +- Install the Admin MSI on your GPMC machine +- Install the CSE on a test Windows machine +- Set up a computer in Trial mode or Licensed mode +- Set up a common OU structure + +Optionally, if you don't want to use Group Policy, read the section in Appendix A: Advanced Concepts +on Group Policy and non-Group Policy methods (MEMCM, KACE, and MDM service or Endpoint Policy +Manager Cloud) ([Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/uemtools.md)) to +deploy your directives. + +Netwrix Endpoint Policy Manager (formerly PolicyPak) Start Screen & Taskbar Manager enables you to +perform the following operations on Windows 10: + +- Place specific tiles for Desktop Edge and Universal Windows Platform (UWP) applications into your + own desired Start Menu groups +- Remove all existing Start Menu groups (created by users or default from Microsoft) +- Configure the Start Menu to enable users to create their own groups +- Pin applications to the Taskbar or remove user-pinned applications from the Taskbar + +:::note +For an overview of Endpoint Policy Manager Start Screen & Taskbar Manager, watch the +videos at +[https://www.endpointpolicymanager.com/products/endpointpolicymanager-start-screen-taskbar-manager.html](https://www.endpointpolicymanager.com/products/endpointpolicymanager-start-screen-taskbar-manager.html). +::: + + +The basic way to use Start Screen & Taskbar Manager is as follows: + +- Create rules to express which applications should appear in which Start Menu group +- Export the Start Screen & Taskbar Manager rules and deliver them using: + + - Microsoft Endpoint Manager (SCCM and Intune) + - Your own systems management software + - A mobile device management (MDM) service + - Endpoint Policy Manager Cloud service + +- Allow the client machine with the Endpoint Policy Manager client-side extension (CSE) to embrace + the directives and perform the work. + +:::note +If you use the Endpoint Policy Manager Cloud service, you can deliver Group Policy +settings even to non-domain-joined machines over the Internet. +::: + + +## Moving Parts + +- A management station. The Endpoint Policy Manager Admin Console MSI must be installed on your + management station where you create group policy objects (GPOs). Once it's installed, you'll see + the Endpoint Policy Manager | Start Screen Manager node and Endpoint Policy Manager | Taskbar + Manager node. +- The Endpoint Policy Manager CSE. This runs on the client (target) machine and is the same CSE for + all Endpoint Policy Manager products. There isn't anything separate to install, and the Endpoint + Policy Manager CSE must be present in order to accept Endpoint Policy Manager Start Screen & + Taskbar Manager directives via Group Policy, or when using Microsoft Endpoint Manager (SCCM and + Intune), KACE, MDM, or similar utilities. +- Endpoints. In order to use these, they must be licensed for Endpoint Policy Manager Start Screen & + Taskbar Manager using one of the licensing methods. +- Endpoint Policy Manager Exporter (optional). A free utility that lets you take Endpoint Policy + Manager Admin Templates Manager and our other products' XML files and wrap them into a "portable" + MSI file for deployment using Microsoft Endpoint Manager (SCCM and Intune), an MDM service, or + your own systems management software. diff --git a/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/startscreen/_category_.json b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/startscreen/_category_.json new file mode 100644 index 0000000000..f9bb499c38 --- /dev/null +++ b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/startscreen/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Quick Start - Start Screen Manager", + "position": 30, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/startscreen/desktopapplications.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/startscreen/desktopapplications.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/startscreen/desktopapplications.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/manual/startscreen/desktopapplications.md diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/startscreen/edgetiles.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/startscreen/edgetiles.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/startscreen/edgetiles.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/manual/startscreen/edgetiles.md diff --git a/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/startscreen/overview.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/startscreen/overview.md new file mode 100644 index 0000000000..fd68aacaf0 --- /dev/null +++ b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/startscreen/overview.md @@ -0,0 +1,36 @@ +--- +title: "Quick Start - Start Screen Manager" +description: "Quick Start - Start Screen Manager" +sidebar_position: 30 +--- + +# Quick Start - Start Screen Manager + +:::note +For some video overviews of Start Screen & Taskbar Manager, see Start Screen & Task Bar +Manager > [Video Learning Center](/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/videolearningcenter.md). +::: + + +If you want to follow along with this Quickstart guide for Start Screen Manager, we suggest you +first download some applications on your Windows 10 management station and your endpoint. Start +Screen & Taskbar Manager is the best and quickest way to set up, test, and manage the Start Screen +and Taskbar from your machine (the Group Policy Editor machine) if you have the same applications as +the target machines. Therefore, we recommend you install Adobe Acrobat Reader twice—once on your +management station and once on your Window 10 endpoint. We suggest the offline MSI installer +package, which can be found at +[https://get.adobe.com/reader/enterprise/](https://get.adobe.com/reader/enterprise/). Make sure, for +the purposes of this Quickstart, you install the same version on your management station as on your +endpoint. + +You should be able to see Acrobat Reader in the Start Menu, as shown in Figure 5. + +![quickstart_start_screen_manager](/images/endpointpolicymanager/startscreentaskbar/startscreen/quickstart_start_screen_manager.webp) + +Figure 5. Adobe Reader is installed on the GPMC machine and the Windows 10 Endpoint. + +After Adobe Reader is installed, we can see that it is not automatically assigned to any group in +the Start Menu. Using Start Screen & Taskbar Manager, we want to place all of our newly installed +applications into a single group called "My Important Apps." In this Quickstart, we will create a +group policy object (GPO) and link it to your sample users. (You could also create and link a GPO to +your computers, but we will not be doing that in this Quickstart.) diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/startscreen/uwpapplications.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/startscreen/uwpapplications.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/startscreen/uwpapplications.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/manual/startscreen/uwpapplications.md diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/startscreen/windows10.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/startscreen/windows10.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/startscreen/windows10.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/manual/startscreen/windows10.md diff --git a/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/startscreentaskbar/_category_.json b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/startscreentaskbar/_category_.json new file mode 100644 index 0000000000..ef83254957 --- /dev/null +++ b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/startscreentaskbar/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Troubleshooting", + "position": 70, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/startscreentaskbar/logsusercomputerside.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/startscreentaskbar/logsusercomputerside.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/startscreentaskbar/logsusercomputerside.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/manual/startscreentaskbar/logsusercomputerside.md diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/startscreentaskbar/overview.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/startscreentaskbar/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/startscreentaskbar/overview.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/manual/startscreentaskbar/overview.md diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/startscreentaskbar/xmlfiles.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/startscreentaskbar/xmlfiles.md similarity index 100% rename from docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/startscreentaskbar/xmlfiles.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/manual/startscreentaskbar/xmlfiles.md diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/taskbar.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/taskbar.md similarity index 95% rename from docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/taskbar.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/manual/taskbar.md index 62914a6305..320c6feb5b 100644 --- a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/taskbar.md +++ b/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/taskbar.md @@ -10,7 +10,7 @@ Now you're ready to create Netwrix Endpoint Policy Manager (formerly PolicyPak) :::note For a video overview of Taskbar Manager, see -[](https://www.endpointpolicymanager.com/products/endpointpolicymanager-start-screen-manager.html)[Endpoint Policy Taskbar Manager: Quick Demo](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/gettingstarted/demotaskbar.md). +[](https://www.endpointpolicymanager.com/products/endpointpolicymanager-start-screen-manager.html)[Endpoint Policy Taskbar Manager: Quick Demo](/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/gettingstarted/demotaskbar.md). ::: diff --git a/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/_category_.json b/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/_category_.json new file mode 100644 index 0000000000..d50e383b71 --- /dev/null +++ b/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Tech Notes", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "knowledgebase" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/knowledgebase.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/knowledgebase.md new file mode 100644 index 0000000000..dee32c9558 --- /dev/null +++ b/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/knowledgebase.md @@ -0,0 +1,37 @@ +--- +title: "Knowledge Base" +description: "Knowledge Base" +sidebar_position: 10 +--- + +# Knowledge Base + +See the following Knowledge Base articles for Start Screen and Task Bar Manager. + +## Troubleshooting + +- [Why aren't Taskbar manager policies working as expected on my Windows 10 machine?](/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/windows10.md) +- [When does Endpoint Policy Manager Start Screen & Taskbar Manager work on Server 2019, 2016, 2012 R2?](/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/windowserver.md) +- [I use Partial/Merge mode, and expected existing icons to be maintained, but instead they were wiped out. What happened?](/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/existingicons.md) +- [How can I revert / rollback the Windows 10 Start Screen after I make an error (using Partial or Replace mode)?](/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/rollback.md) +- [Endpoint Policy Manager Start Screen & Taskbar Manager crashes, hangs or is slow when running Group Policy update. Why?](/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/crash.md) +- [Why do I see a group named ">Endpoint Policy ManagerStart Screen manager" on the left side in Endpoint Policy Manager Start Screen & Taskbar Manager ?](/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/pinnedcollection.md) +- [Why do I get the error "This app can't run on your PC" ?](/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/appcantrun.md) +- [Why am I seeing an Endpoint Policy Manager "advertisement" tile on my Start Screen (when I only use the TaskBar manager and NOT the Start Screen Manager?)](/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/linked.md) +- [Windows default applications are not showing in Start Menu](/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/windowsdefault.md) +- [Endpoint Policy Manager Task Bar Manager differences between MERGE and REPLACE modes](/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/modes.md) +- [Custom icons for Endpoint Policy Manager Start Screen & Taskbar Manager aren't working as expected. What can I do?](/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/customicons.md) +- [How to Disable the "How do you want to open this? Keep using this app" Notification in Windows 10](/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/windows10disablenotification.md) +- [Why would it sometimes takes two logoffs and logons to see Start Screen or Taskbar changes?](/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/logons.md) +- [Does Endpoint Policy Manager Start Screen Manager support pinning application icons in Windows Start Screen or Taskbar from a network location, i.e. Mapped Drives or UNC Paths?](/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/mappeddrives.md) +- [Why don't I see Office 2016, Office 2019, or Office 365 icons or tiles using Start Screen Manager?](/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/office365.md) + +## Tips and Tricks + +- [How do I add Explorer.exe to the taskbar using Endpoint Policy Manager Start Screen & Taskbar Manager ?](/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/tipsandtricks/explorer.md) +- [How do I add the SCCM Software Center to the Start Screen or Taskbar?](/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/tipsandtricks/sccmsoftwarecenter.md) +- [Can Microsoft App-V applications work with Endpoint Policy Manager Starts Screen and Taskbar Manager?](/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/tipsandtricks/appv.md) +- [How do I add the Least Privilege Manager Helper tools to the Left and Right side of the Start Menu?](/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/tipsandtricks/helpertools.md) +- [How-To create a folder shortcut in Windows 10 Start Menu using Endpoint Policy Manager Starts Screen Manager?](/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/tipsandtricks/foldershortcut.md) +- [How can I add a link to the Control Panel to the Start Screen or Taskbar using Endpoint Policy Manager Start Screen Manager?](/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/tipsandtricks/addlink.md) +- [How to automatically kill explorer at 1st Logon to Bypass needing to logout and back in for Start Screen Manager to apply](/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/tipsandtricks/logonworkaround.md) diff --git a/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/tipsandtricks/_category_.json b/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/tipsandtricks/_category_.json new file mode 100644 index 0000000000..6ba42bb498 --- /dev/null +++ b/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/tipsandtricks/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Tips And Tricks", + "position": 20, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/tipsandtricks/addlink.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/tipsandtricks/addlink.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/tipsandtricks/addlink.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/tipsandtricks/addlink.md diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/tipsandtricks/appv.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/tipsandtricks/appv.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/tipsandtricks/appv.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/tipsandtricks/appv.md diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/tipsandtricks/explorer.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/tipsandtricks/explorer.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/tipsandtricks/explorer.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/tipsandtricks/explorer.md diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/tipsandtricks/foldershortcut.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/tipsandtricks/foldershortcut.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/tipsandtricks/foldershortcut.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/tipsandtricks/foldershortcut.md diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/tipsandtricks/helpertools.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/tipsandtricks/helpertools.md similarity index 98% rename from docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/tipsandtricks/helpertools.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/tipsandtricks/helpertools.md index d800e9282e..5e4a63dc49 100644 --- a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/tipsandtricks/helpertools.md +++ b/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/tipsandtricks/helpertools.md @@ -14,10 +14,10 @@ This article will explain the process of adding the helper to the Windows Start right side. For more information on the Helper Tools, click -[Overcome Network Card, Printer, and Remove Programs UAC prompts](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/helperstoolsandtips/uacprompts.md). +[Overcome Network Card, Printer, and Remove Programs UAC prompts](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/helperstoolsandtips/uacprompts.md). To enable the helper tools and give the power to the users, click -[Endpoint Policy Manager Least Priv Manager Tools Setup](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/helperstoolsandtips/toolssetup.md), and +[Endpoint Policy Manager Least Priv Manager Tools Setup](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/helperstoolsandtips/toolssetup.md), and follow the directions. The helper tool must be enabled to work. ## Adding the LPM Helper Tools to the Right Start Menu diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/tipsandtricks/logonworkaround.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/tipsandtricks/logonworkaround.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/tipsandtricks/logonworkaround.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/tipsandtricks/logonworkaround.md diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/tipsandtricks/sccmsoftwarecenter.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/tipsandtricks/sccmsoftwarecenter.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/tipsandtricks/sccmsoftwarecenter.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/tipsandtricks/sccmsoftwarecenter.md diff --git a/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/_category_.json b/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/_category_.json new file mode 100644 index 0000000000..5a4bd8ada0 --- /dev/null +++ b/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Troubleshooting", + "position": 10, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/appcantrun.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/appcantrun.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/appcantrun.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/appcantrun.md diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/crash.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/crash.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/crash.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/crash.md diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/customicons.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/customicons.md similarity index 96% rename from docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/customicons.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/customicons.md index 62fccd2919..b16ae493ed 100644 --- a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/customicons.md +++ b/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/customicons.md @@ -17,7 +17,7 @@ a manifest file which overrides the ability for Endpoint Policy Manager Start Sc Manager to deliver the icon as expected. Watch this video first: -[Endpoint Policy Manager Start Screen Manager and Special Custom Icons](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/troubleshooting/customicons.md). +[Endpoint Policy Manager Start Screen Manager and Special Custom Icons](/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/troubleshooting/customicons.md). ## Problem 2: You are attempting to use UNC paths for icons diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/existingicons.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/existingicons.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/existingicons.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/existingicons.md diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/linked.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/linked.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/linked.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/linked.md diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/logons.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/logons.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/logons.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/logons.md diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/mappeddrives.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/mappeddrives.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/mappeddrives.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/mappeddrives.md diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/modes.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/modes.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/modes.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/modes.md diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/office365.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/office365.md similarity index 93% rename from docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/office365.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/office365.md index 4d26246b99..463f6ae733 100644 --- a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/office365.md +++ b/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/office365.md @@ -29,7 +29,7 @@ To get this to work, you should use the Endpoint Policy Manager Start Screen Hel machine with the version of Office 2016, 2019, or Office 365 you want to add icons for. Here's the video on this -tool:[Endpoint Policy Manager Start Screen and Taskbar Manager Helper Utility](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/gettingstarted/helperutility.md)/ +tool:[Endpoint Policy Manager Start Screen and Taskbar Manager Helper Utility](/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/gettingstarted/helperutility.md)/ Summary to get Office icons to appear on endpoints: diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/pinnedcollection.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/pinnedcollection.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/pinnedcollection.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/pinnedcollection.md diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/rollback.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/rollback.md similarity index 88% rename from docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/rollback.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/rollback.md index 38c2576907..7326a42d1f 100644 --- a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/rollback.md +++ b/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/rollback.md @@ -10,4 +10,4 @@ Use Netwrix Endpoint Policy Manager (formerly PolicyPak) Script manager to run a re-trigger the initial start menu layout. Note you may not get an EXACT revert; but it's pretty close. -[Endpoint Policy ManagerStart Screen and Endpoint Policy Manager Scripts: Specify exact Start Menu experience one time](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/extras/onetime.md) +[Endpoint Policy ManagerStart Screen and Endpoint Policy Manager Scripts: Specify exact Start Menu experience one time](/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/extras/onetime.md) diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/windows10.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/windows10.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/windows10.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/windows10.md diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/windows10disablenotification.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/windows10disablenotification.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/windows10disablenotification.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/windows10disablenotification.md diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/windowsdefault.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/windowsdefault.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/windowsdefault.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/windowsdefault.md diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/windowserver.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/windowserver.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/windowserver.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/troubleshooting/windowserver.md diff --git a/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/_category_.json b/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/_category_.json new file mode 100644 index 0000000000..77675c0c90 --- /dev/null +++ b/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Videos", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "videolearningcenter" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/extras/_category_.json b/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/extras/_category_.json new file mode 100644 index 0000000000..8a57d40e96 --- /dev/null +++ b/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/extras/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Extras", + "position": 40, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/extras/onetime.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/extras/onetime.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/extras/onetime.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/videos/extras/onetime.md diff --git a/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/gettingstarted/_category_.json b/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/gettingstarted/_category_.json new file mode 100644 index 0000000000..7eb735f33a --- /dev/null +++ b/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/gettingstarted/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Getting Started", + "position": 10, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/gettingstarted/demotaskbar.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/gettingstarted/demotaskbar.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/gettingstarted/demotaskbar.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/videos/gettingstarted/demotaskbar.md diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/gettingstarted/helperutility.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/gettingstarted/helperutility.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/gettingstarted/helperutility.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/videos/gettingstarted/helperutility.md diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/gettingstarted/itemleveltargeting.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/gettingstarted/itemleveltargeting.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/gettingstarted/itemleveltargeting.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/videos/gettingstarted/itemleveltargeting.md diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/gettingstarted/linksie.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/gettingstarted/linksie.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/gettingstarted/linksie.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/videos/gettingstarted/linksie.md diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/gettingstarted/windows10startmenu.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/gettingstarted/windows10startmenu.md similarity index 98% rename from docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/gettingstarted/windows10startmenu.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/videos/gettingstarted/windows10startmenu.md index 389cdac7fb..c1f8697447 100644 --- a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/gettingstarted/windows10startmenu.md +++ b/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/gettingstarted/windows10startmenu.md @@ -137,7 +137,7 @@ right where you want to in the right group of your choice. Endpoint Policy Manager Start Screen Manager is a real game changer. Continue to watch the other videos, like how to change -[Endpoint Policy Manager File Associations Manager: Manage Windows 10 & 11 File Associations](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/gettingstarted/windows10.md) settings, +[Endpoint Policy Manager File Associations Manager: Manage Windows 10 & 11 File Associations](/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/gettingstarted/windows10.md) settings, to see how you can easily open PDFs, MAILTO and MP4s with the programs you want. Thanks so much for watching, and talk to you soon. diff --git a/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/methods/_category_.json b/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/methods/_category_.json new file mode 100644 index 0000000000..1f1354f705 --- /dev/null +++ b/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/methods/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Methods SCCM XML MDM Cloud PDQ Citrix Etc", + "position": 30, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/methods/citrix.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/methods/citrix.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/methods/citrix.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/videos/methods/citrix.md diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/methods/mdm.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/methods/mdm.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/methods/mdm.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/videos/methods/mdm.md diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/methods/mdmitemleveltargeting.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/methods/mdmitemleveltargeting.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/methods/mdmitemleveltargeting.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/videos/methods/mdmitemleveltargeting.md diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/methods/nondomainjoined.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/methods/nondomainjoined.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/methods/nondomainjoined.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/videos/methods/nondomainjoined.md diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/methods/pdqdeploy.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/methods/pdqdeploy.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/methods/pdqdeploy.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/videos/methods/pdqdeploy.md diff --git a/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/troubleshooting/_category_.json b/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/troubleshooting/_category_.json new file mode 100644 index 0000000000..289c6f8855 --- /dev/null +++ b/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/troubleshooting/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Troubleshooting", + "position": 20, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/troubleshooting/customicons.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/troubleshooting/customicons.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/troubleshooting/customicons.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/videos/troubleshooting/customicons.md diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/troubleshooting/revertstartmenu.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/troubleshooting/revertstartmenu.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/troubleshooting/revertstartmenu.md rename to docs/endpointpolicymanager/components/startscreenandtaskbar/videos/troubleshooting/revertstartmenu.md diff --git a/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/videolearningcenter.md b/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/videolearningcenter.md new file mode 100644 index 0000000000..469b39ffe3 --- /dev/null +++ b/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/videolearningcenter.md @@ -0,0 +1,34 @@ +--- +title: "Video Learning Center" +description: "Video Learning Center" +sidebar_position: 20 +--- + +# Video Learning Center + +See the following Video topics for Start Screen and Task Bar Manager. + +## Getting Started + +- [Endpoint Policy Manager Start Screen and Taskbar Manager Helper Utility](/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/gettingstarted/helperutility.md) +- [Endpoint Policy Manager Start Screen Manager: Own the Win10 Start Menu](/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/gettingstarted/windows10startmenu.md) +- [Endpoint Policy Taskbar Manager: Quick Demo](/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/gettingstarted/demotaskbar.md) +- [Endpoint Policy Manager Start Screen Manager: Using Item Level Targeting](/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/gettingstarted/itemleveltargeting.md) +- [Endpoint Policy Manager Start Screen Manager: Add IE links](/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/gettingstarted/linksie.md) + +## Troubleshooting + +- [Endpoint Policy Manager Start Screen Manager and Special Custom Icons](/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/troubleshooting/customicons.md) +- [Using PP SCRIPTS to Revert Start Menu](/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/troubleshooting/revertstartmenu.md) + +## Methods: SCCM, XML, MDM, Cloud, PDQ, Citrix, etc. + +- [Endpoint Policy ManagerStart Screen & Taskbar Manager: Manage non-domain joined machines using Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/methods/nondomainjoined.md) +- [Endpoint Policy Manager Start Screen & Taskbar Manager: Manage Windows 10 Start Screen & Taskbar with your MDM service (Basics with MDM)](/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/methods/mdm.md) +- [Endpoint Policy Manager Start Screen Manager: Manage Windows 10 Start Screen & Taskbar with your MDM (Advanced scenarios with ILT)](/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/methods/mdmitemleveltargeting.md) +- [PP Start Screen and Taskbar manager with Citrix XenApp and XenDesktop](/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/methods/citrix.md) +- [Taking Control of Your Taskbar and Start Menu with Endpoint Policy Manager and PDQ Deploy](/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/methods/pdqdeploy.md) + +## Extras + +- [Endpoint Policy ManagerStart Screen and Endpoint Policy Manager Scripts: Specify exact Start Menu experience one time](/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/extras/onetime.md) diff --git a/docs/endpointpolicymanager/deliverymethods/_category_.json b/docs/endpointpolicymanager/deliverymethods/_category_.json new file mode 100644 index 0000000000..28fac483cb --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Delivery Methods", + "position": 19, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/deliverymethods/cloud/_category_.json b/docs/endpointpolicymanager/deliverymethods/cloud/_category_.json new file mode 100644 index 0000000000..6bdb715333 --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/cloud/_category_.json @@ -0,0 +1 @@ +{"label":"Cloud","position":10,"collapsed":true,"collapsible":true} diff --git a/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/_category_.json b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/_category_.json new file mode 100644 index 0000000000..ebf9bc76c5 --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/_category_.json @@ -0,0 +1 @@ +{"label":"Knowledge Base","position":1,"collapsed":true,"collapsible":true,"link":{"type":"doc","id":"knowledgebase"}} diff --git a/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/_category_.json b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/_category_.json new file mode 100644 index 0000000000..f192cb35ae --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Client Tips Tricks And FAQs", + "position": 70, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/azurevirutaldesktop.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/azurevirutaldesktop.md similarity index 97% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/azurevirutaldesktop.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/azurevirutaldesktop.md index 2a840f90a5..9631ed7a42 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/azurevirutaldesktop.md +++ b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/azurevirutaldesktop.md @@ -49,7 +49,7 @@ For Example: For more information on creating and using a JOINTOKEN to automatically assign computers to computer groups in PPC please see this video KB: -[Endpoint Policy Manager Cloud: Automatically Join Groups with JOINTOKEN](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/jointoken.md) +[Endpoint Policy Manager Cloud: Automatically Join Groups with JOINTOKEN](/docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/jointoken.md) :::note For Persistent VMs skip steps 4-7 below. @@ -118,7 +118,7 @@ For Example: For more information on creating and using a JOINTOKEN to automatically assign computers to computer groups in PPC please see this video: -[Endpoint Policy Manager Cloud: Automatically Join Groups with JOINTOKEN](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/jointoken.md) +[Endpoint Policy Manager Cloud: Automatically Join Groups with JOINTOKEN](/docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/jointoken.md) OPTIONAL: Run `PPCloud /sync` from a command prompt to verify that you see the correct groups assigned. In my example I am using a JOINTOKEN for a computer group called Testing so I see the diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/clientsilent.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/clientsilent.md similarity index 93% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/clientsilent.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/clientsilent.md index cde8191c28..e90a67de9a 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/clientsilent.md +++ b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/clientsilent.md @@ -26,7 +26,7 @@ environment. See this video for more information on how to use JOINTOKEN: ::: -[Endpoint Policy Manager Cloud: Automatically Join Groups with JOINTOKEN](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/jointoken.md) +[Endpoint Policy Manager Cloud: Automatically Join Groups with JOINTOKEN](/docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/jointoken.md) For more information on the MSIEXEC command line switches, see this article: [Microsoft Standard Installer command-line options](https://docs.microsoft.com/en-us/windows/win32/msi/standard-installer-command-line-options) diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/edit.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/edit.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/edit.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/edit.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/groups.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/groups.md similarity index 86% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/groups.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/groups.md index 4d422c7cb5..54d479f182 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/groups.md +++ b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/groups.md @@ -15,4 +15,4 @@ Information on creating jointokens: - Manual: [https://helpcenter.netwrix.com/bundle/endpointpolicymanager_AppendixE/page/Tools.html](https://helpcenter.netwrix.com/bundle/endpointpolicymanager_AppendixE/page/Tools.html) and - Video: - [Endpoint Policy Manager Cloud: Automatically Join Groups with JOINTOKEN](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/jointoken.md) + [Endpoint Policy Manager Cloud: Automatically Join Groups with JOINTOKEN](/docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/jointoken.md) diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/printers.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/printers.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/printers.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/printers.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/publickeypoliciessettings.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/publickeypoliciessettings.md similarity index 92% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/publickeypoliciessettings.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/publickeypoliciessettings.md index d06bebe8a0..44b7bc552c 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/publickeypoliciessettings.md +++ b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/publickeypoliciessettings.md @@ -14,7 +14,7 @@ To configure Security Settings, start by opening the Group Policy Management Edi real GPO. Then export using PP Settings Manager to an -XML. [Endpoint Policy ManagerCloud: How to deploy Microsoft Group Policy Settings using Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/grouppolicysettings.md) +XML. [Endpoint Policy ManagerCloud: How to deploy Microsoft Group Policy Settings using Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/grouppolicysettings.md) Then, upload it to PPCloud. This would make the specified cert a Trusted Root CA on the target machines. diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/remoteworkdeliverymanager.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/remoteworkdeliverymanager.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/remoteworkdeliverymanager.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/remoteworkdeliverymanager.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/removeendpoint.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/removeendpoint.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/removeendpoint.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/removeendpoint.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/syncfrequency.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/syncfrequency.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/syncfrequency.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/syncfrequency.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/targetingeditor.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/targetingeditor.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/targetingeditor.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/targetingeditor.md diff --git a/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/transition.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/transition.md new file mode 100644 index 0000000000..1e85be7e10 --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/transition.md @@ -0,0 +1,10 @@ +--- +title: "How do I transition from Endpoint Policy Managerusing Group Policy or SCCM method to Endpoint Policy Manager Cloud" +description: "How do I transition from Endpoint Policy Managerusing Group Policy or SCCM method to Endpoint Policy Manager Cloud" +sidebar_position: 125 +hide_title: true +--- + +import Transition from '/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/gettingstarted/transition.md'; + + \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/type.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/type.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/type.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/type.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/unlink.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/unlink.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/unlink.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/unlink.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/updatefrequency.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/updatefrequency.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/updatefrequency.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/updatefrequency.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/vdisolutions.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/vdisolutions.md similarity index 98% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/vdisolutions.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/vdisolutions.md index 59e96de61e..81a68746b4 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/vdisolutions.md +++ b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/vdisolutions.md @@ -43,7 +43,7 @@ groups, you should install the PPC Client using the command line instead, for ex The JOINTOKEN value is specific to each environment, the value used above is provided as an example only. For more information on using JOINTOKEN to automatically assign computers to computer groups in PPC please see this video: -[Endpoint Policy Manager Cloud: Automatically Join Groups with JOINTOKEN](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/jointoken.md) +[Endpoint Policy Manager Cloud: Automatically Join Groups with JOINTOKEN](/docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/jointoken.md) **Step 5 –** Next, create an empty text file named `logoff.bat` under the same folder where we saved the PPC Client MSI earlier (`C:\PPC Client`). Edit `logoff.bat` using notepad and add the line diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/version.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/version.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/version.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/version.md diff --git a/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/_category_.json b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/_category_.json new file mode 100644 index 0000000000..1de0a3339d --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Client Troubleshooting", + "position": 40, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/autoupdates.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/autoupdates.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/autoupdates.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/autoupdates.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/ciscoanyconnect.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/ciscoanyconnect.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/ciscoanyconnect.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/ciscoanyconnect.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/clientsideextension.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/clientsideextension.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/clientsideextension.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/clientsideextension.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/expired.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/expired.md similarity index 89% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/expired.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/expired.md index e744a30ffa..3ab5672d92 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/expired.md +++ b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/expired.md @@ -13,6 +13,6 @@ This computer then transitions to the WAITING LIST and can pick up a new license available. To learn more about the WAITING LIST, -[Endpoint Policy Manager Cloud Client: Why are computers appearing in WAITING LIST and how can I fix it?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/waitinglist.md). +[Endpoint Policy Manager Cloud Client: Why are computers appearing in WAITING LIST and how can I fix it?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/waitinglist.md). ![308_1_jhhj](/images/endpointpolicymanager/troubleshooting/cloud/308_1_jhhj.webp) diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/grouppolicyeditors.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/grouppolicyeditors.md similarity index 97% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/grouppolicyeditors.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/grouppolicyeditors.md index ba8290a049..1c81352fca 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/grouppolicyeditors.md +++ b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/grouppolicyeditors.md @@ -13,7 +13,7 @@ But this will only show you the items which are coming from on-prem Group Policy Endpoint Policy Manager (formerly PolicyPak) Cloud. To see Endpoint Policy Manager Cloud results on a Endpoint Policy Manager cloud joined machine, use -the[Endpoint Policy Manager Cloud Reporting Demo](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/reports.md). +the[Endpoint Policy Manager Cloud Reporting Demo](/docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/reports.md). You can also see the policies on the machine by running `PPCLOUD /SYNC` and seeing the itemized list, like what is in the two screenshots below. diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/incomplete.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/incomplete.md similarity index 97% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/incomplete.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/incomplete.md index a6ce8273eb..11acd942ca 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/incomplete.md +++ b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/incomplete.md @@ -84,5 +84,5 @@ September or October 2023. __NOTE:__ If you have a slow connection on the endpoint, the CSE can be downloaded from our customer portal and pre-installed. Please refer to the following KB article -> -[How can I best install Endpoint Policy Manager Cloud for remote clients over a slow link/internet connection?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/gettingstarted/slowinternet.md) +[How can I best install Endpoint Policy Manager Cloud for remote clients over a slow link/internet connection?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/gettingstarted/slowinternet.md) ```` diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/invalidcertificate.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/invalidcertificate.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/invalidcertificate.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/invalidcertificate.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/outage.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/outage.md similarity index 94% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/outage.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/outage.md index d8ef636f2e..0f6adf2d8e 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/outage.md +++ b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/outage.md @@ -11,7 +11,7 @@ unavailable or "goes down". This is rare, but it can happen. First, to verify and ensure the problem is with the Endpoint Policy Manager Cloud service, and not something on your end, please see the following article -[Troubleshoot communication from the Cloud Client and Cloud Service](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/servicecommunication.md) (and +[Troubleshoot communication from the Cloud Client and Cloud Service](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/servicecommunication.md) (and the sub-KB articles at the end). However, if the Endpoint Policy Manager Cloud service itself is down, you might see the following diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/proxyserver.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/proxyserver.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/proxyserver.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/proxyserver.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/proxyservices.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/proxyservices.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/proxyservices.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/proxyservices.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/registrationlimit.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/registrationlimit.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/registrationlimit.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/registrationlimit.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/registrationmode.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/registrationmode.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/registrationmode.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/registrationmode.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/securitytoken.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/securitytoken.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/securitytoken.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/securitytoken.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/servicecommunication.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/servicecommunication.md similarity index 92% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/servicecommunication.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/servicecommunication.md index 7c393e77e6..ddcca7fe66 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/servicecommunication.md +++ b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/servicecommunication.md @@ -53,10 +53,10 @@ Additional Considerations - If the connection fails, that could mean there is some kind of proxy. To configure the proxy for the system, see the - [I always use a proxy and the cloud client cannot seem to make contact with the services (see FAQ Item #3 above first.) What else can I try?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/proxyservices.md) topic + [I always use a proxy and the cloud client cannot seem to make contact with the services (see FAQ Item #3 above first.) What else can I try?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/proxyservices.md) topic for additional information. - If the connection passes, that could mean the Date and Time are wrong on the machine. First manually try to correct the date and time. Then run `PPCLOUD /SYNC` command and see if it succeeds. If that still fails to work, see the - [I am getting an error about "GPSVC failed at sign-in". This error occurs exactly one time. What does this mean?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/installandupgrade/gpsvcfailed.md) topic + [I am getting an error about "GPSVC failed at sign-in". This error occurs exactly one time. What does this mean?](/docs/endpointpolicymanager/installation/knowledgebase/installandupgrade/gpsvcfailed.md) topic for additional information on alternative time fix instructions. diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/sync.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/sync.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/sync.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/sync.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/syncfail.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/syncfail.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/syncfail.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/syncfail.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/transition.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/transition.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/transition.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/transition.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/twofactorauthenticationcode.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/twofactorauthenticationcode.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/twofactorauthenticationcode.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/twofactorauthenticationcode.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/verbose.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/verbose.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/verbose.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/verbose.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/verifysecurity.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/verifysecurity.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/verifysecurity.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/verifysecurity.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/versions.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/versions.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/versions.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/versions.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/waitinglist.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/waitinglist.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/waitinglist.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/waitinglist.md diff --git a/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/cloudlicensing/_category_.json b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/cloudlicensing/_category_.json new file mode 100644 index 0000000000..ebd269fad4 --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/cloudlicensing/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Cloud Licensing", + "position": 30, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/cloudlicensing/usage.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/cloudlicensing/usage.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/cloudlicensing/usage.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/cloudlicensing/usage.md diff --git a/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/cloudportalsecurity/_category_.json b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/cloudportalsecurity/_category_.json new file mode 100644 index 0000000000..6da13f3c26 --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/cloudportalsecurity/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Cloud Portal Security", + "position": 20, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/cloudportalsecurity/administrator.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/cloudportalsecurity/administrator.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/cloudportalsecurity/administrator.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/cloudportalsecurity/administrator.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/cloudportalsecurity/datasafety.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/cloudportalsecurity/datasafety.md similarity index 96% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/cloudportalsecurity/datasafety.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/cloudportalsecurity/datasafety.md index e7cf3efe0c..ad8ae4dec2 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/cloudportalsecurity/datasafety.md +++ b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/cloudportalsecurity/datasafety.md @@ -49,9 +49,9 @@ endpoint data For example Endpoint Policy Manager Least Privilege Manager events which can be stored for a time in Endpoint Policy Manager Cloud Service (not enabled for all customers.) Details of this feature can be seen - at[Endpoint Policy Manager Cloud + PPLPM + Events: Collect Events in the Cloud](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/cloudevents.md) + at[Endpoint Policy Manager Cloud + PPLPM + Events: Collect Events in the Cloud](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/eventing/cloudevents.md) and details about specific event types (for example) can be found here: - [List of Endpoint Policy Manager Event Categories and IDs](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/eventcategories.md) + [List of Endpoint Policy Manager Event Categories and IDs](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/eventcategories.md) #### How is data is stored at rest with Endpoint Policy Manager Cloud: diff --git a/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/cloudportaltroubleshooting/_category_.json b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/cloudportaltroubleshooting/_category_.json new file mode 100644 index 0000000000..c290b45f9f --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/cloudportaltroubleshooting/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Cloud Portal Troubleshooting", + "position": 50, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/cloudportaltroubleshooting/entraid.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/cloudportaltroubleshooting/entraid.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/cloudportaltroubleshooting/entraid.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/cloudportaltroubleshooting/entraid.md diff --git a/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/eventcollection/_category_.json b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/eventcollection/_category_.json new file mode 100644 index 0000000000..ec8d6dee6a --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/eventcollection/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Event Collection", + "position": 80, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/eventcollection/childgroups.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/eventcollection/childgroups.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/eventcollection/childgroups.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/eventcollection/childgroups.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/eventcollection/report.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/eventcollection/report.md similarity index 96% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/eventcollection/report.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/eventcollection/report.md index da7e6d960d..150a47e1d3 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/eventcollection/report.md +++ b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/eventcollection/report.md @@ -43,7 +43,7 @@ The steps are as follows: ![1331_4_7343ac11bad81555a0df4d9b989c7992](/images/endpointpolicymanager/cloud/eventcollection/1331_4_7343ac11bad81555a0df4d9b989c7992.webp) **Step 5 –** You can select the drop-down option to select the **Event IDs**. See the -[List of Endpoint Policy Manager Event Categories and IDs](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/eventcategories.md) topic for +[List of Endpoint Policy Manager Event Categories and IDs](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/eventcategories.md) topic for additional information on the event categories and IDs. ![1331_5_1abd34538213d5d2da7bf97cdc936d01](/images/endpointpolicymanager/cloud/eventcollection/1331_5_1abd34538213d5d2da7bf97cdc936d01.webp) diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/eventcollection/splunk.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/eventcollection/splunk.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/eventcollection/splunk.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/eventcollection/splunk.md diff --git a/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/gettingstarted/_category_.json b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/gettingstarted/_category_.json new file mode 100644 index 0000000000..7eb735f33a --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/gettingstarted/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Getting Started", + "position": 10, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/gettingstarted/activedirectory.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/gettingstarted/activedirectory.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/gettingstarted/activedirectory.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/gettingstarted/activedirectory.md diff --git a/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/gettingstarted/client.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/gettingstarted/client.md new file mode 100644 index 0000000000..f49d2e1fbd --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/gettingstarted/client.md @@ -0,0 +1,28 @@ +--- +title: "When must I use the Endpoint Policy ManagerCloud Client installer versus the on-prem Endpoint Policy Manager CSE?" +description: "When must I use the Endpoint Policy ManagerCloud Client installer versus the on-prem Endpoint Policy Manager CSE?" +sidebar_position: 20 +--- + +# When must I use the Endpoint Policy ManagerCloud Client installer versus the on-prem Endpoint Policy Manager CSE? + +The Netwrix Endpoint Policy Manager (formerly PolicyPak) Cloud Client is the software you download +to enable a machine to join your instance of Endpoint Policy Manager Cloud, claim a license, and +download policies. + +The Endpoint Policy Manager Cloud Client will also download the Endpoint Policy Manager Client Side +Extension to process of the policies. + +When you install the Endpoint Policy Manager cloud client, the CSE is downloaded from the cloud +service automatically at the same time. + +To keep the Endpoint Policy Manager Cloud Client up to date, as well as the Endpoint Policy Manager +Client Side Extension, you need to be proactive. + +Please see this article for keeping things proactive: + +[https://www.endpointpolicymanager.com/resources/pp-blog/using-rings-to-test-and-update-the-policypak-client-side-extension-and-how-to-stay-supported/](https://www.endpointpolicymanager.com/resources/pp-blog/using-rings-to-test-and-update-the-policypak-client-side-extension-and-how-to-stay-supported/) + +This video also has some important information on how to perform updates: + +[Endpoint Policy Manager Cloud Groups CSE and Cloud Client Small-Scale Testing and Updates](/docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/groups.md) diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/gettingstarted/clientdomainnondomain.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/gettingstarted/clientdomainnondomain.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/gettingstarted/clientdomainnondomain.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/gettingstarted/clientdomainnondomain.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/gettingstarted/clientremote.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/gettingstarted/clientremote.md similarity index 95% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/gettingstarted/clientremote.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/gettingstarted/clientremote.md index eb303bdcb6..0b7eab0f3f 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/gettingstarted/clientremote.md +++ b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/gettingstarted/clientremote.md @@ -23,7 +23,7 @@ because the installation must be performed as a local admin. Here are some strat You can also use Endpoint Policy Manager Least Privilege Manager to enable non-Admins to be able to install the Endpoint Policy Manager Cloud client themselves (provided the Endpoint Policy Manager CSE is pre-installed.) See this video for more details: -[Install the PP Cloud client with a PP Least Priv Manager Rule](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/tipsandtricks/leastprivilegemanagerrule.md) +[Install the PP Cloud client with a PP Least Priv Manager Rule](/docs/endpointpolicymanager/deliverymethods/cloud/videos/tipsandtricks/leastprivilegemanagerrule.md) ::: diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/gettingstarted/cloud.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/gettingstarted/cloud.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/gettingstarted/cloud.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/gettingstarted/cloud.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/gettingstarted/creditcard.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/gettingstarted/creditcard.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/gettingstarted/creditcard.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/gettingstarted/creditcard.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/gettingstarted/fakedc.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/gettingstarted/fakedc.md similarity index 98% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/gettingstarted/fakedc.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/gettingstarted/fakedc.md index ae2a077736..47ccb9423c 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/gettingstarted/fakedc.md +++ b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/gettingstarted/fakedc.md @@ -22,7 +22,7 @@ station. For a good overview, you can check our videos on Endpoint Policy ManagerCloud, particularly the ones on requirements and procedures to get started. You can find the videos at the -[Video Learning Center](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/videolearningcenter.md) +[Video Learning Center](/docs/endpointpolicymanager/deliverymethods/cloud/videos/videolearningcenter.md) ## Part 2: MMC vs in-cloud editors diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/gettingstarted/slowinternet.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/gettingstarted/slowinternet.md similarity index 91% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/gettingstarted/slowinternet.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/gettingstarted/slowinternet.md index b50fe5be9b..90461857f7 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/gettingstarted/slowinternet.md +++ b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/gettingstarted/slowinternet.md @@ -45,6 +45,6 @@ Support for a download link. For more details about setting up machines for VDI environments please check the following topics. -[Can I embed the Endpoint Policy ManagerClient Side Extension and/or Endpoint Policy Manager Cloud client into a master image for VDI, MDT, Ghost, Citrix, etc?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/embedclient.md) +[Can I embed the Endpoint Policy ManagerClient Side Extension and/or Endpoint Policy Manager Cloud client into a master image for VDI, MDT, Ghost, Citrix, etc?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/embedclient.md) -[How to install the Endpoint Policy Manager Cloud Client for use in an Azure Virtual Desktop image](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/azurevirutaldesktop.md) +[How to install the Endpoint Policy Manager Cloud Client for use in an Azure Virtual Desktop image](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/azurevirutaldesktop.md) diff --git a/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/gettingstarted/transition.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/gettingstarted/transition.md new file mode 100644 index 0000000000..54ee2deca1 --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/gettingstarted/transition.md @@ -0,0 +1,287 @@ +--- +title: "How do I transition from Endpoint Policy Managerusing Group Policy or SCCM method to Endpoint Policy Manager Cloud" +description: "How do I transition from Endpoint Policy Managerusing Group Policy or SCCM method to Endpoint Policy Manager Cloud" +sidebar_position: 10 +--- + +# How do I transition from Endpoint Policy Managerusing Group Policy or SCCM method to Endpoint Policy Manager Cloud + +Transitioning from Endpoint Policy Manager using Group Policy or SCCM method to Endpoint Policy +Manager Cloud is very straightforward. + +:::tip +Remember, Once Endpoint Policy Manager settings are created, they are transferable to XML, which +can be used with any method: Group Policy, Intune, SCCM, or Endpoint Policy Manager Cloud. +::: + + +This topic assumes you will have policies in the Group Policy editor and want to transfer them to +Endpoint Policy Manager Cloud. The actual current delivery method you are starting from doesn’t +matter. You can start from Group Policy, SCCM, or an MDM service like Intune and transfer over to +Endpoint Policy Manager Cloud. + +Here is an overview of the steps involved in transitioning an existing investment in Endpoint Policy +Manager with Group Policy or SCCM method over to Endpoint Policy Manager Cloud: + +**Step 1 –** Pre-testing that Endpoint Policy Manager Cloud is working at all with the built-in +policies. + +**Step 2 –** Exporting existing Endpoint Policy Manager settings within Group Policy to XML and +importing them into Endpoint Policy Manager Cloud. + +**Step 3 –** Optional: Backup and Restore entire GPO to Endpoint Policy Manager cloud. + +**Step 4 –** Use In-Cloud Editors to create and update rules. + +**Step 5 –** Using Endpoint Policy Manager Cloud to create company groups and/or use Endpoint Policy +Manager Cloud to Azure connector. + +**Step 6 –** Linking Endpoint Policy Manager Cloud XML to Endpoint Policy Manager Cloud Company +Groups or Azure Groups. + +**Step 7 –** Deploying the Endpoint Policy Manager Cloud Client and/or CSE to endpoints. + +**Step 8 –** Removing existing Group Policy, SCCM or Intune based Endpoint Policy Manager setting +settings from machines + +**Step 9 –** Report using Endpoint Policy Manager Cloud to verify expected settings are achieved. + +**Step 10 –** Keeping Endpoint Policy Manager Cloud computers up to date with client software using +Endpoint Policy Manager Cloud Groups. + +## Pre-testing that Endpoint Policy Manager Cloud is working at all with the built-in policies. + +Start by verifying that your Endpoint Policy Manager Cloud account is generally working. See the +[Endpoint Policy Manager Cloud: QuickStart](/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/quickstart.md) topic for additional +information. + +You will be verifying that your Endpoint Policy Manager Cloud account is licensed, operational and +working as expected. + +## Exporting existing Endpoint Policy Manager settings within Group Policy to XML and importing them into Endpoint Policy Manager Cloud. + +Continue to export your existing invested Endpoint Policy Manager settings into XML format. + +You can export one setting at a time like this: + +![941_1_image-20230521113923-1_950x502](/images/endpointpolicymanager/cloud/941_1_image-20230521113923-1_950x502.webp) + +You can export a Collection like this: + +![941_2_image-20230521113923-2_950x589](/images/endpointpolicymanager/cloud/941_2_image-20230521113923-2_950x589.webp) + +Or you can export a whole category like this: + +![941_3_image-20230521113923-3](/images/endpointpolicymanager/cloud/941_3_image-20230521113923-3.webp) + +You can also export settings en-mass across multiple GPOs using the Endpoint Policy Manager Exporter +Utility. The steps to do that are here +[Deploying Endpoint Policy Managerdirectives without Group Policy (Endpoint Policy Manager Exporter Utility)](/docs/endpointpolicymanager/gettingstarted/misc/videos/methods/exporterutility.md) + +Then you can upload them straight into Endpoint Policy Manager cloud using the Upload and link a new +XML here. Or you can go to the XML Settings tab (not shown) and also upload them there for later +use. + +![941_4_image-20230521113923-4_950x326](/images/endpointpolicymanager/cloud/941_4_image-20230521113923-4_950x326.webp) + +You may also view the XML in notepad and copy/paste the XML straight into Endpoint Policy Manager +cloud using the same setting, Upload and link a new XML here as seen around the 5 minute and 20 +second mark continuing onward. + +See the +[Endpoint Policy ManagerCloud: How to deploy Endpoint Policy Manager specific settings (using in-cloud editors and exporting from on-prem)](/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/endpointpolicymanagersettings.md) topic +for additional information. + +## Optional: Backup and Restore entire GPO to Endpoint Policy Manager cloud + +You might also have a GPO with a lot of settings, which contain Microsoft and/or Endpoint Policy +Manager settings. You can transfer the whole contents of that GPO with a GPO Backup and Endpoint +Policy Manager Cloud Import. + +![941_5_image-20230521113923-5_950x386](/images/endpointpolicymanager/cloud/941_5_image-20230521113923-5_950x386.webp) + +The result will be a de-constructed GPO with all relevant parts as XML, available to re-link later +to Company or Azure groups. + +See the [How to import GPOs to Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/import.md) topic for +additional information. + +## Use In-Cloud Editors to create and update rules (for most policies) + +Now that all your rules are lifted and shifted from GPO Editor to XML to Cloud, you can use the +in-cloud editors to perform most new policy types and edit existing policies. + +![941_6_image-20230521113923-6_950x448](/images/endpointpolicymanager/cloud/941_6_image-20230521113923-6_950x448.webp) + +Here’s an example of how to use the Endpoint Policy Manager Cloud in-cloud editors to create and +edit Endpoint Policy Manager Least Privilege Manager items. + +![941_7_image-20230521113923-7_950x1063](/images/endpointpolicymanager/cloud/941_7_image-20230521113923-7_950x1063.webp) + +See the +[Use Endpoint Policy Manager Cloud to deploy PP Least Privilege Manager rules](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/methods/cloudrules.md) topic +for additional information. + +You are advised to maintain a Windows based MMC editing station for testing because not every +editing function may be available in the Endpoint Policy Manager Cloud editors. Most items are, but +a few are not. Details about Endpoint Policy Manager Cloud and Test Lab Best Practices are here: +Getting Started with Cloud > [Knowledge Base](/docs/endpointpolicymanager/). + +## Using Endpoint Policy Manager Cloud to create company groups and/or use the Endpoint Policy Manager Cloud to Azure connector + +Now you can craft your Company Group assignment and then adding computers to it. + +See the [Working with Groups](/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/computergroups/workingwith.md) topic for additional +information. + +An example of crafting your own Company groups, linking existing XMLs, creating new policies and +Adding/Removing computers from these Company Groups can be seen here. + +![941_8_image-20230521113923-8_950x503](/images/endpointpolicymanager/cloud/941_8_image-20230521113923-8_950x503.webp) + +Another option is the ability to mate your Endpoint Policy Manager Cloud instance with your Azure +Instance and use Azure Groups as well. You can establish a connection between Endpoint Policy +Manager Cloud and Azure using these steps: + +![941_9_image-20230521113923-9_950x491](/images/endpointpolicymanager/cloud/941_9_image-20230521113923-9_950x491.jpeg) + +Then Azure groups will appear at the same level as Company Groups and you can link XML to those +Azure groups. + +![941_10_image-20230521113923-10_950x286](/images/endpointpolicymanager/cloud/941_10_image-20230521113923-10_950x286.jpeg) + +Provided the Endpoint Policy Manager Cloud Client is on the machine (one of the next steps), the +computer will pick up the policies in either the Computer Group or Azure Group. (`PPCLOUD /sync` +will show these details.) + +![941_11_image-20230521113923-11_950x295](/images/endpointpolicymanager/cloud/941_11_image-20230521113923-11_950x295.jpeg) + +## Linking Endpoint Policy Manager Cloud XML to Endpoint Policy Manager Cloud Company Groups or Azure Groups + +Because your XML policies are now uploaded to Endpoint Policy Manager Cloud, you are ready to link +them over to the Company Group or Azure Group of your choice. Remember that Endpoint Policy Manager +Cloud acts nearly the same as on-prem GPO with the following attributes: + +- Groups are like OUs, though a computer may be in two Endpoint Policy Manager Cloud Groups (where + in on-prem AD it may only be in one.) +- Block Inheritance is available +- Enforced is available +- Precedence is available + +See the [Working with Groups](/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/computergroups/workingwith.md) topic for additional +information. + +## Deploying the Endpoint Policy Manager Cloud Client and/or CSE to endpoints + +Now you’re ready to deliver the Endpoint Policy Manager Cloud client to your machines, which will +join the machines to Endpoint Policy Manager Cloud. + +![941_12_image-20230521113923-12_950x461](/images/endpointpolicymanager/cloud/941_12_image-20230521113923-12_950x461.webp) + +:::note +If the machines already have the Endpoint Policy Manager CSE installed, there is no need +to uninstall the Endpoint Policy Manager CSE. It is permitted to pre-install the CSE on the machine +before the Endpoint Policy Manager Cloud client and could actually save you a lot of time during +Endpoint Policy Manager Cloud client rollout. +::: + + +There are a myriad of ways to install the Endpoint Policy Manager Cloud client, since it is just an +MSI. When the Cloud Client is installed it will automatically install the Endpoint Policy Manager +CSE if it is not present on the machine like what’s seen here. + +![941_13_image-20230521113923-13_950x691](/images/endpointpolicymanager/cloud/941_13_image-20230521113923-13_950x691.webp) + +:::note +The machine may also upgrade to a later CSE if a Endpoint Policy Manager Cloud group +dictates a later CSE; but the CSE will never downgrade. (See the last section in this guide for more +details.) +::: + + +Additionally, you may wish to investigate the idea of having computers automatically join the +Endpoint Policy Manager Cloud group of your choice with the Jointoken property. Two videos on that +topic are: + +- [Endpoint Policy Manager Cloud: Automatically Join Groups with JOINTOKEN](/docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/jointoken.md) +- [Endpoint Policy Manager Cloud + MDM Services: Install Cloud Client + automatically join PPC Groups and get policy.](/docs/endpointpolicymanager/deliverymethods/cloud/videos/usingwithothermethods/mdm.md) + +:::note +There are some other KB topicswith advanced scenarios on installing the Endpoint Policy +Manager Cloud client for Azure Virtual Desktops, VDI and other scenarios. Please open a ticket at +[Netwrix Support](https://www.netwrix.com/sign_in.html?rf=tickets.html#netwrix-support), if you have +trouble locating those articles. +::: + + +:::note +Here's some command line examples to help install the Endpoint Policy Manager Cloud client +silently. See the +[How do I deploy the Endpoint Policy Manager Cloud Client via command line silently?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/clientsilent.md) topic +for additional information. +::: + + +## Removing existing settings to machines (GPO and Non-GPO method) + +Now you are ready to remove existing policy from machines. This will vary depending on the source +method of deploying policy. + +- For GPO, we recommend unlinking the GPO(s) which have Endpoint Policy Manager / now transferred + settings. Then run `GPupdate  /force`,  then   `GPresult /h out1.html` and ensure the settings you + want are now absent from the Group Policy Results. +- For SCCM and MDM/Intune, perform an uninstall of the wrapped up XMLs / MSIs. You can also verify + the XML settings are removed from your endpoint from the Users or Groups or Computer folder. See + the + [What is the processing order of all policies and how are conflicts resolved (and how can I see the final RsOP) of those policies (between GPO, Cloud, XML, etc)?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/conflictresolved.md) topic + for additional information. + +## Report using Endpoint Policy Manager Cloud to verify expected settings are achieved + +There are two ways to determine if your endpoint(s) got the policies you expected. + +On the client + +Method one is akin to GP update and you simply run `PPCLOUD /sync` (performs a SYNC then displays) +or Endpoint Policy Manager Cloud /status (no sync, just displays), and you can see any specific +machines' current state and policies. + +![941_14_image-20230521113923-14_950x823](/images/endpointpolicymanager/cloud/941_14_image-20230521113923-14_950x823.webp) + +See the [Manually Syncing with PolicyPak Cloud](/docs/endpointpolicymanager/gettingstarted/cloudmanual/quickstart/verify.md#manually-syncing-with-policypak-cloud) +topic for additional information.[](https://helpcenter.netwrix.com/en-US/bundle/Endpoint Policy +Manager_AppendixE/page/Manually_Syncing_with_Endpoint Policy Manager_Cloud.html) + +On the server + +Additionally, you may mass report upon machines using the Endpoint Policy Manager Cloud reporting +mechanism. + +![941_15_image-20230521113923-15_950x386](/images/endpointpolicymanager/cloud/941_15_image-20230521113923-15_950x386.webp) + +See the [Endpoint Policy Manager Cloud Reporting Demo](/docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/reports.md) topic for +additional information. + +Either method will inform you if the settings you lifted and shifted to Endpoint Policy Manager +Cloud are now on the endpoint. + +## Keeping Endpoint Policy Manager Cloud Client and Endpoint Policy Manager CSE up to date + +Finally, it is important to keep the Endpoint Policy Manager Cloud Client and the Endpoint Policy +Manager CSE up to date. Endpoint Policy Manager Company Groups control the versions of the Endpoint +Policy Manager Cloud Client and Endpoint Policy Manager CSE. + +![941_16_image-20230521113923-16_950x529](/images/endpointpolicymanager/cloud/941_16_image-20230521113923-16_950x529.webp) + +You should always do small scale testing of upgrades of the Endpoint Policy Manager CSE and Endpoint +Policy Manager Cloud Client version to ensure safety before you roll it out to everyone via the All +group. + +See the +[Using Rings to Test and Update the Endpoint Policy Manager Client-Side Extension and/or Cloud Client (And How to Stay Supported)](/docs/endpointpolicymanager/upgrademaintenance/bestpractices/rings.md) topic +for additional information on the Microsoft Ring methodology, which aligns to Endpoint Policy +Manager best practices. + +See the +[Endpoint Policy Manager Cloud Groups CSE and Cloud Client Small-Scale Testing and Updates](/docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/groups.md) topic +for additional information on how to perform small scale testing before large scale upgrades. diff --git a/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/knowledgebase.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/knowledgebase.md new file mode 100644 index 0000000000..5883bba737 --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/knowledgebase.md @@ -0,0 +1,90 @@ +--- +title: "Knowledge Base" +description: "Knowledge Base" +sidebar_position: 10 +--- + +# Knowledge Base + +See the following Knowledge Base articles for getting started with Cloud. + +## Getting Started + +- [How do I transition from Endpoint Policy Managerusing Group Policy or SCCM method to Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/gettingstarted/transition.md) +- [What are the OS requirements for Endpoint Policy Manager Cloud?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/gettingstarted/cloud.md) +- [When must I use the Endpoint Policy ManagerCloud Client installer versus the on-prem Endpoint Policy Manager CSE?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/gettingstarted/client.md) +- [Can I use an Endpoint Policy Manager Cloud installer and license for domain-joined and non-domain joined machines?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/gettingstarted/clientdomainnondomain.md) +- [Is there an "Active Directory Connector" to map on-prem OUs and Groups to Endpoint Policy Manager Cloud?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/gettingstarted/activedirectory.md) +- [What editors are there in Endpoint Policy Manager Cloud (and when would I need a "Fake DC" to do editing?)](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/gettingstarted/fakedc.md) +- [What are the ways I can install the Endpoint Policy Manager Cloud Client on Remote Machines?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/gettingstarted/clientremote.md) +- [How can I best install Endpoint Policy Manager Cloud for remote clients over a slow link/internet connection?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/gettingstarted/slowinternet.md) +- [How do I start credit card billing with Endpoint Policy Manager SaaS Edition?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/gettingstarted/creditcard.md) + +## Cloud Portal Security + +- [What data is stored in Endpoint Policy Manager Cloud, and how is that data safely communicated and stored ?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/cloudportalsecurity/datasafety.md) +- [Endpoint Policy Manager Cloud Portal - Adding new company admins - Quickstart](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/cloudportalsecurity/administrator.md) + +## Cloud Licensing + +- [How is Endpoint Policy Manager Cloud usage counted and calculated toward my True-Up?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/cloudlicensing/usage.md) + +## Client Troubleshooting + +- [How can I see the result of Endpoint Policy Manager Cloud inside the Group Policy Editors?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/grouppolicyeditors.md) +- [Troubleshoot communication from the Cloud Client and Cloud Service](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/servicecommunication.md) +- [How can I see if an Endpoint Policy Manager Cloud joined computer is syncing in the background, even if PPCLOUD /Sync appears to fail?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/syncfail.md) +- [How do I transition from Endpoint Policy ManagerCloud to Endpoint Policy Manager Group Policy Edition?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/transition.md) +- [How must my Proxy Server be configured to allow Endpoint Policy Manager Cloud communication?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/proxyserver.md) +- [How to resolve error message "Could not sync with cloud…" caused by disabling TLS 1.0](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/sync.md) +- [I always use a proxy and the cloud client cannot seem to make contact with the services (see FAQ Item #3 above first.) What else can I try?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/proxyservices.md) +- [I get the message "At least one security token in the message could not be validated" during PPCloud client installation. How do I work around this?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/securitytoken.md) +- [I am getting an error about "GPSVC failed at sign-in". This error occurs exactly one time. What does this mean?](/docs/endpointpolicymanager/installation/knowledgebase/installandupgrade/gpsvcfailed.md) +- [I'm using Cisco Anyconnect and all the computers I register via Endpoint Policy Manager Cloud are being overwritten. Why is this and what can I do?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/ciscoanyconnect.md) +- [My cloud client lost it's join to Endpoint Policy Manager Cloud , and a re-install of the cloud MSI I previously downloaded isn't working / re-syncing. What should I do?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/autoupdates.md) +- [Endpoint Policy Manager Cloud Client: Why are computers appearing in WAITING LIST and how can I fix it?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/waitinglist.md) +- [Endpoint Policy Manager Cloud shows "The license certificate has expired". Why is this?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/expired.md) +- [Two-factor Authentication: You're not receiving code for email-based two-factor authentication](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/twofactorauthenticationcode.md) +- [What happens if there is an outage on Endpoint Policy Manager Cloud ?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/outage.md) +- [What is the Endpoint Policy Manager Cloud client installation error "The remote certificate is invalid according to the validation procedure."](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/invalidcertificate.md) +- [When rolling out Endpoint Policy Manager Cloud, the Client Side Extension does not get installed with the Cloud Client on initial rollout](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/clientsideextension.md) +- [Why do I see duplicate computer entries in Endpoint Policy Manager Cloud (Or, what is Loose, Strict and Advanced Registration)?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/registrationmode.md) +- [The Incorrect (non-matching) version of PPPUPDATE is installed on a PPC endpoint](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/versions.md) +- [How to enable verbose MSIEXEC logging for the installation of Endpoint Policy Manager Cloud Client MSI/Client Side Extension MSI?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/verbose.md) +- [Understanding and working within Endpoint Policy Manager Clouds Computer registration limit.](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/registrationlimit.md) +- [My Endpoint Policy Manager Cloud Client or Client Side Extension isn't completing the installation; How do I fix it?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttroubleshooting/incomplete.md) + +## Cloud Portal Troubleshooting + +- [How do I fully reset my Azure AD connection between Azure and Endpoint Policy Manager Cloud to start over?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/cloudportaltroubleshooting/entraid.md) + +## Mac Integration + +- [What are the step by step instructions to install the MacOS Client for Endpoint Policy Manager Cloud manually?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/macintegration/client.md) +- [How to get signature info from pkg installer?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/macintegration/signature.md) +- [Where are log files for the Endpoint Policy Manager MacOS?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/macintegration/mac.md) +- [How to get SHA of the package](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/macintegration/sha.md) +- [How to get SigningID of the package?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/macintegration/signingid.md) + +## Client Tips, Tricks, and FAQs + +- [What are the most common questions about editing policies using the Endpoint Policy ManagerCloud policy editor (instead of using the MMC to upload to Endpoint Policy Manager Cloud?)](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/edit.md) +- [How to remove (unlink) all Example policies at once from the All-Built-in Group](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/unlink.md) +- [How to use Remote Work Delivery Manager to apply Firewall policies](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/remoteworkdeliverymanager.md) +- [If I want to totally stop using Endpoint Policy ManagerCloud on an endpoint, how would I remove the Endpoint Policy Manager Cloud client pieces remotely?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/removeendpoint.md) +- [How often does the Endpoint Policy Manager cloud client pull down new or updated directives?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/updatefrequency.md) +- [When does Endpoint Policy Managersync to Endpoint Policy Manager Cloud?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/syncfrequency.md) +- [How do I configure Security Settings | Public Key Policies using Endpoint Policy Manager Cloud?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/publickeypoliciessettings.md) +- [Printers won't come back once removed by user](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/printers.md) +- [Using Targeting Editor in Endpoint Policy Manager Cloud Settings](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/targetingeditor.md) +- [How to install the Endpoint Policy Manager Cloud Client for use in an Azure Virtual Desktop image](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/azurevirutaldesktop.md) +- [How to install and configure the PPC Client for a Non-Persistent VDI Image in VMware Horizon](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/vdisolutions.md) +- [How do I deploy the Endpoint Policy Manager Cloud Client via command line silently?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/clientsilent.md) +- [Are Endpoint Policy Manager Cloud policies processed on User or Computer side (and why do I only sometimes see User or Computer side ILT?)](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/type.md) +- [How can I move a computer from one Endpoint Policy Manager Cloud group to another via command line?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/groups.md) +- [How to find which PPCloud Client version & CSE version a registered computer is running from within the Endpoint Policy Manager Cloud portal](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/version.md) + +## Event Collection + +- [How can I keep the same or specify different parameters for Event Collection for child groups? How does a computer behave if a member of multiple groups?](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/eventcollection/childgroups.md) +- [ Endpoint Policy Manager Cloud Event Forwarding to Splunk](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/eventcollection/splunk.md) diff --git a/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/macintegration/_category_.json b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/macintegration/_category_.json new file mode 100644 index 0000000000..aacd612c96 --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/macintegration/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Mac Integration", + "position": 60, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/macintegration/client.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/macintegration/client.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/macintegration/client.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/macintegration/client.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/macintegration/mac.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/macintegration/mac.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/macintegration/mac.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/macintegration/mac.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/macintegration/sha.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/macintegration/sha.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/macintegration/sha.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/macintegration/sha.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/macintegration/signature.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/macintegration/signature.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/macintegration/signature.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/macintegration/signature.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/macintegration/signingid.md b/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/macintegration/signingid.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/macintegration/signingid.md rename to docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/macintegration/signingid.md diff --git a/docs/endpointpolicymanager/deliverymethods/cloud/videos/_category_.json b/docs/endpointpolicymanager/deliverymethods/cloud/videos/_category_.json new file mode 100644 index 0000000000..f5151829fd --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/cloud/videos/_category_.json @@ -0,0 +1 @@ +{"label":"Videos","position":2,"collapsed":true,"collapsible":true,"link":{"type":"doc","id":"videolearningcenter"}} diff --git a/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/_category_.json b/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/_category_.json new file mode 100644 index 0000000000..7eb735f33a --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Getting Started", + "position": 10, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/admxfiles.md b/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/admxfiles.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/admxfiles.md rename to docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/admxfiles.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/admxsettings.md b/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/admxsettings.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/admxsettings.md rename to docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/admxsettings.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/armsupport.md b/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/armsupport.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/armsupport.md rename to docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/armsupport.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/endpointpolicymanagersettings.md b/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/endpointpolicymanagersettings.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/endpointpolicymanagersettings.md rename to docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/endpointpolicymanagersettings.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/grouppolicysettings.md b/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/grouppolicysettings.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/grouppolicysettings.md rename to docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/grouppolicysettings.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/introduction.md b/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/introduction.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/introduction.md rename to docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/introduction.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/onpremiseexport.md b/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/onpremiseexport.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/onpremiseexport.md rename to docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/onpremiseexport.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/preferences.md b/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/preferences.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/preferences.md rename to docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/preferences.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/quickstart.md b/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/quickstart.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/quickstart.md rename to docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/quickstart.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/securitysettings.md b/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/securitysettings.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/securitysettings.md rename to docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/securitysettings.md diff --git a/docs/endpointpolicymanager/deliverymethods/cloud/videos/security/_category_.json b/docs/endpointpolicymanager/deliverymethods/cloud/videos/security/_category_.json new file mode 100644 index 0000000000..c185023dc4 --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/cloud/videos/security/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Security", + "position": 40, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/security/administrator.md b/docs/endpointpolicymanager/deliverymethods/cloud/videos/security/administrator.md similarity index 96% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/security/administrator.md rename to docs/endpointpolicymanager/deliverymethods/cloud/videos/security/administrator.md index 004b2ad468..1600ac5c58 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/security/administrator.md +++ b/docs/endpointpolicymanager/deliverymethods/cloud/videos/security/administrator.md @@ -9,7 +9,7 @@ The process of adding new admins to your cloud service couldn't be easier. Watch out how. See -also:  [Endpoint Policy Manager Cloud Portal - Adding new company admins - Quickstart](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/cloudportalsecurity/administrator.md) +also:  [Endpoint Policy Manager Cloud Portal - Adding new company admins - Quickstart](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/cloudportalsecurity/administrator.md) Hi, this is Whitney with PolicyPak Software. In this video, we are talking about adding a new admin to your cloud service. There are a few different scenarios in which this could happen, so we'll walk diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/security/emaillogs.md b/docs/endpointpolicymanager/deliverymethods/cloud/videos/security/emaillogs.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/security/emaillogs.md rename to docs/endpointpolicymanager/deliverymethods/cloud/videos/security/emaillogs.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/security/features.md b/docs/endpointpolicymanager/deliverymethods/cloud/videos/security/features.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/security/features.md rename to docs/endpointpolicymanager/deliverymethods/cloud/videos/security/features.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/security/immutablelog.md b/docs/endpointpolicymanager/deliverymethods/cloud/videos/security/immutablelog.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/security/immutablelog.md rename to docs/endpointpolicymanager/deliverymethods/cloud/videos/security/immutablelog.md diff --git a/docs/endpointpolicymanager/deliverymethods/cloud/videos/testlabbestpractices/_category_.json b/docs/endpointpolicymanager/deliverymethods/cloud/videos/testlabbestpractices/_category_.json new file mode 100644 index 0000000000..358b50212d --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/cloud/videos/testlabbestpractices/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Test Lab Best Practices", + "position": 20, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/testlabbestpractices/createdc.md b/docs/endpointpolicymanager/deliverymethods/cloud/videos/testlabbestpractices/createdc.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/testlabbestpractices/createdc.md rename to docs/endpointpolicymanager/deliverymethods/cloud/videos/testlabbestpractices/createdc.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/testlabbestpractices/onpremise.md b/docs/endpointpolicymanager/deliverymethods/cloud/videos/testlabbestpractices/onpremise.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/testlabbestpractices/onpremise.md rename to docs/endpointpolicymanager/deliverymethods/cloud/videos/testlabbestpractices/onpremise.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/testlabbestpractices/renameendpoint.md b/docs/endpointpolicymanager/deliverymethods/cloud/videos/testlabbestpractices/renameendpoint.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/testlabbestpractices/renameendpoint.md rename to docs/endpointpolicymanager/deliverymethods/cloud/videos/testlabbestpractices/renameendpoint.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/testlabbestpractices/start.md b/docs/endpointpolicymanager/deliverymethods/cloud/videos/testlabbestpractices/start.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/testlabbestpractices/start.md rename to docs/endpointpolicymanager/deliverymethods/cloud/videos/testlabbestpractices/start.md diff --git a/docs/endpointpolicymanager/deliverymethods/cloud/videos/tipsandtricks/_category_.json b/docs/endpointpolicymanager/deliverymethods/cloud/videos/tipsandtricks/_category_.json new file mode 100644 index 0000000000..91bd4d5de4 --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/cloud/videos/tipsandtricks/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Tips And Tricks", + "position": 50, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/tipsandtricks/entraid.md b/docs/endpointpolicymanager/deliverymethods/cloud/videos/tipsandtricks/entraid.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/tipsandtricks/entraid.md rename to docs/endpointpolicymanager/deliverymethods/cloud/videos/tipsandtricks/entraid.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/tipsandtricks/fileinfoviewer.md b/docs/endpointpolicymanager/deliverymethods/cloud/videos/tipsandtricks/fileinfoviewer.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/tipsandtricks/fileinfoviewer.md rename to docs/endpointpolicymanager/deliverymethods/cloud/videos/tipsandtricks/fileinfoviewer.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/tipsandtricks/leastprivilegemanagerrule.md b/docs/endpointpolicymanager/deliverymethods/cloud/videos/tipsandtricks/leastprivilegemanagerrule.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/tipsandtricks/leastprivilegemanagerrule.md rename to docs/endpointpolicymanager/deliverymethods/cloud/videos/tipsandtricks/leastprivilegemanagerrule.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/tipsandtricks/restricted_groups_editor.md b/docs/endpointpolicymanager/deliverymethods/cloud/videos/tipsandtricks/restricted_groups_editor.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/tipsandtricks/restricted_groups_editor.md rename to docs/endpointpolicymanager/deliverymethods/cloud/videos/tipsandtricks/restricted_groups_editor.md diff --git a/docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/_category_.json b/docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/_category_.json new file mode 100644 index 0000000000..c1e8a0886e --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Upkeep And Daily Use", + "position": 60, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/groups.md b/docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/groups.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/groups.md rename to docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/groups.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/import.md b/docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/import.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/import.md rename to docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/import.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/jointoken.md b/docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/jointoken.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/jointoken.md rename to docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/jointoken.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/registrationmode.md b/docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/registrationmode.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/registrationmode.md rename to docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/registrationmode.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/reports.md b/docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/reports.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/reports.md rename to docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/reports.md diff --git a/docs/endpointpolicymanager/deliverymethods/cloud/videos/usingwithothermethods/_category_.json b/docs/endpointpolicymanager/deliverymethods/cloud/videos/usingwithothermethods/_category_.json new file mode 100644 index 0000000000..52a4f6d8f9 --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/cloud/videos/usingwithothermethods/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Using With Other METHODS MDM And Group Policy", + "position": 30, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/usingwithothermethods/mdm.md b/docs/endpointpolicymanager/deliverymethods/cloud/videos/usingwithothermethods/mdm.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/usingwithothermethods/mdm.md rename to docs/endpointpolicymanager/deliverymethods/cloud/videos/usingwithothermethods/mdm.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/usingwithothermethods/onpremise.md b/docs/endpointpolicymanager/deliverymethods/cloud/videos/usingwithothermethods/onpremise.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/usingwithothermethods/onpremise.md rename to docs/endpointpolicymanager/deliverymethods/cloud/videos/usingwithothermethods/onpremise.md diff --git a/docs/endpointpolicymanager/deliverymethods/cloud/videos/videolearningcenter.md b/docs/endpointpolicymanager/deliverymethods/cloud/videos/videolearningcenter.md new file mode 100644 index 0000000000..88ba85bc7c --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/cloud/videos/videolearningcenter.md @@ -0,0 +1,55 @@ +--- +title: "Video Learning Center" +description: "Video Learning Center" +sidebar_position: 20 +--- + +# Video Learning Center + +See the following Video topics for all things installation and upkeep. + +## Getting Started + +- [Endpoint Policy Manager Cloud: Two minute introduction](/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/introduction.md) +- [Endpoint Policy Manager Cloud: QuickStart](/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/quickstart.md) +- [Endpoint Policy ManagerCloud: How to deploy Microsoft Group Policy Settings using Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/grouppolicysettings.md) +- [Endpoint Policy ManagerCloud: How to deploy Endpoint Policy Manager specific settings (using in-cloud editors and exporting from on-prem)](/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/endpointpolicymanagersettings.md) +- [Endpoint Policy ManagerCloud: Use in-cloud ADMX settings maintained by Endpoint Policy Manager for Windows, Office, Chrome and more](/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/admxsettings.md) +- [Endpoint Policy ManagerCloud: Upload and use your own ADMX files to Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/admxfiles.md) +- [Endpoint Policy Manager Cloud: General Tips about On-Prem to PP Cloud Export](/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/onpremiseexport.md) +- [Endpoint Policy Manager Cloud and Security Settings (More examples)](/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/securitysettings.md) +- [Endpoint Policy Manager Cloud + GPPrefs (More examples)](/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/preferences.md) + +## Test Lab Best Practices + +- [Endpoint Policy Manager Cloud: What you need to get Started](/docs/endpointpolicymanager/deliverymethods/cloud/videos/testlabbestpractices/start.md) +- [How to create a DC for editing purposes](/docs/endpointpolicymanager/deliverymethods/cloud/videos/testlabbestpractices/createdc.md) +- [Testing and Troubleshooting By Renaming an endpoint Computer](/docs/endpointpolicymanager/deliverymethods/cloud/videos/testlabbestpractices/renameendpoint.md) +- [Endpoint Policy Manager Cloud: On-Prem Test Lab (tying it all together)](/docs/endpointpolicymanager/deliverymethods/cloud/videos/testlabbestpractices/onpremise.md) + +## Using with other METHODS (MDM and Group Policy) + +- [Endpoint Policy Manager Cloud + MDM Services: Install Cloud Client + automatically join PPC Groups and get policy.](/docs/endpointpolicymanager/deliverymethods/cloud/videos/usingwithothermethods/mdm.md) +- [Endpoint Policy ManagerCloud and Endpoint Policy Manager OnPremise – Together using PPCloud Licenses](/docs/endpointpolicymanager/deliverymethods/cloud/videos/usingwithothermethods/onpremise.md) + +## Security + +- [Endpoint Policy Manager Cloud: Security Features](/docs/endpointpolicymanager/deliverymethods/cloud/videos/security/features.md) +- [Endpoint Policy Manager Cloud: Immutable Log](/docs/endpointpolicymanager/deliverymethods/cloud/videos/security/immutablelog.md) +- [Endpoint Policy Manager Cloud Logs and Automatically Pushing via Email](/docs/endpointpolicymanager/deliverymethods/cloud/videos/security/emaillogs.md) +- [Endpoint Policy Manager Cloud: Adding New Admins](/docs/endpointpolicymanager/deliverymethods/cloud/videos/security/administrator.md) + +## Tips and Tricks + +- [Install the PP Cloud client with a PP Least Priv Manager Rule](/docs/endpointpolicymanager/deliverymethods/cloud/videos/tipsandtricks/leastprivilegemanagerrule.md) +- [Endpoint Policy Manager Cloud + Azure AD: Better Together for Computer ILT and Computer Policy Targeting](/docs/endpointpolicymanager/deliverymethods/cloud/videos/tipsandtricks/entraid.md) +- [PP Cloud + File Info Viewer: Get file info, without the MMC console](/docs/endpointpolicymanager/deliverymethods/cloud/videos/tipsandtricks/fileinfoviewer.md) +- [Endpoint Policy Manager Cloud: Restricted Groups Editor](/docs/endpointpolicymanager/deliverymethods/cloud/videos/tipsandtricks/restricted_groups_editor.md) + +## Upkeep and Daily Use + +- [Endpoint Policy Manager Cloud Reporting Demo](/docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/reports.md) +- [Endpoint Policy Manager Cloud: Strict vs. Loose Computer Registration Mode](/docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/registrationmode.md) +- [Endpoint Policy Manager Cloud Groups CSE and Cloud Client Small-Scale Testing and Updates](/docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/groups.md) +- [Endpoint Policy Manager Cloud: Automatically Join Groups with JOINTOKEN](/docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/jointoken.md) +- [How to import GPOs to Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/import.md) diff --git a/docs/endpointpolicymanager/deliverymethods/grouppolicy/_category_.json b/docs/endpointpolicymanager/deliverymethods/grouppolicy/_category_.json new file mode 100644 index 0000000000..0c7aab8306 --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/grouppolicy/_category_.json @@ -0,0 +1 @@ +{"label":"Group Policy","position":20,"collapsed":true,"collapsible":true} diff --git a/docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/_category_.json b/docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/_category_.json new file mode 100644 index 0000000000..ebf9bc76c5 --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/_category_.json @@ -0,0 +1 @@ +{"label":"Knowledge Base","position":1,"collapsed":true,"collapsible":true,"link":{"type":"doc","id":"knowledgebase"}} diff --git a/docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/grouppolicy/_category_.json b/docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/grouppolicy/_category_.json new file mode 100644 index 0000000000..b25b04ca7c --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/grouppolicy/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Endpoint Policy Manager Group Policy", + "position": 30, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/grouppolicy/pdqdeploy.md b/docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/grouppolicy/pdqdeploy.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/grouppolicy/pdqdeploy.md rename to docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/grouppolicy/pdqdeploy.md diff --git a/docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/knowledgebase.md b/docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/knowledgebase.md new file mode 100644 index 0000000000..5e9e5b2863 --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/knowledgebase.md @@ -0,0 +1,26 @@ +--- +title: "Knowledge Base" +description: "Knowledge Base" +sidebar_position: 10 +--- + +# Knowledge Base + +See the following Knowledge Base articles for getting started with Group Policy. + +## Troubleshooting + +- [How can I find the name of a GPO located within a PP Log file?](/docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/troubleshooting/guid.md) +- [How does caching of item level targeting work when Microsoft ILT (Preferences ILT) is used?](/docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/troubleshooting/cachepreferences.md) +- [How does caching of Item Level Targeting work when Endpoint Policy Manager ILT (ILT 2.0 Engine) is used?](/docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/troubleshooting/cacheengine.md) +- [How do I turn on Item Level Targeting (ILT) logging if asked by Endpoint Policy Manager Tech Support (when using Preferences ILT engine)?](/docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/troubleshooting/preferences.md) +- [Microsoft August 2024 Updates Breaking New Item-Level Targeting in GPOs](/docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/troubleshooting/itemleveltargeting.md) +- [The Group Policy "Reporting ADM" appears to stop functioning in one GPO. What can I do to fix it?](/docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/troubleshooting/reportingadm.md) + +## Tips, Tricks and FAQs + +- [How to insert User information in any Application via Group Policies?](/docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/tipstricksfaq/insertuserinfo.md) + +## Endpoint Policy Manager Group Policy + +- [How to use PDQ Deploy to collect PPLOGS from remote computers then save them to a network location](/docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/grouppolicy/pdqdeploy.md) diff --git a/docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/tipstricksfaq/_category_.json b/docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/tipstricksfaq/_category_.json new file mode 100644 index 0000000000..ec6d6b9133 --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/tipstricksfaq/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Tips, Tricks And FAQ", + "position": 20, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/tipstricksfaq/insertuserinfo.md b/docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/tipstricksfaq/insertuserinfo.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/tipstricksfaq/insertuserinfo.md rename to docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/tipstricksfaq/insertuserinfo.md diff --git a/docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/troubleshooting/_category_.json b/docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/troubleshooting/_category_.json new file mode 100644 index 0000000000..5a4bd8ada0 --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/troubleshooting/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Troubleshooting", + "position": 10, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/troubleshooting/cacheengine.md b/docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/troubleshooting/cacheengine.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/troubleshooting/cacheengine.md rename to docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/troubleshooting/cacheengine.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/troubleshooting/cachepreferences.md b/docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/troubleshooting/cachepreferences.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/troubleshooting/cachepreferences.md rename to docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/troubleshooting/cachepreferences.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/troubleshooting/guid.md b/docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/troubleshooting/guid.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/troubleshooting/guid.md rename to docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/troubleshooting/guid.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/troubleshooting/itemleveltargeting.md b/docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/troubleshooting/itemleveltargeting.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/troubleshooting/itemleveltargeting.md rename to docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/troubleshooting/itemleveltargeting.md diff --git a/docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/troubleshooting/preferences.md b/docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/troubleshooting/preferences.md new file mode 100644 index 0000000000..70b07ee4f4 --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/troubleshooting/preferences.md @@ -0,0 +1,80 @@ +--- +title: "How do I turn on Item Level Targeting (ILT) logging if asked by Endpoint Policy Manager Tech Support (when using Preferences ILT engine)?" +description: "How do I turn on Item Level Targeting (ILT) logging if asked by Endpoint Policy Manager Tech Support (when using Preferences ILT engine)?" +sidebar_position: 40 +--- + +# How do I turn on Item Level Targeting (ILT) logging if asked by Endpoint Policy Manager Tech Support (when using Preferences ILT engine)? + +Netwrix Endpoint Policy Manager (formerly PolicyPak) Item Level Targeting is a function of Group +Policy Preferences which is also incorporated into Endpoint Policy Manager. There are two pieces to +ILT: The editor and the evaluation within the Client Side Extension. + +The ILT editor in Group Policy Preferences can be seen in every Group Policy Preferences item, like +what's seen here. + +![196_1_img-01](/images/endpointpolicymanager/troubleshooting/log/itemleveltargeting/196_1_img-01.webp) + +The ILT editor in Endpoint Policy Manager can be seen in nearly all Endpoint Policy Manager items, +like what's seen here. + +![196_3_img-02](/images/endpointpolicymanager/troubleshooting/log/itemleveltargeting/196_3_img-02.webp) + +If you think your Item Level Targeting isn't working, we ask that you first "backtrack" to a quick +Group Policy Preferences test and try it there first. + +Indeed, we ask you take two steps: + +**Step 1 –** Create a Group Policy Preferences Shortcut with NO Item Level Targeting. We'll call +this www.1.com . In this experiment, this will be the "Control" group. (No ILT, just to see it +working.) + +**Step 2 –** Create a Group Policy Preferences Shortcut WITH your Item Level Targeting. We'll call +this www.2.com. In this experiment, this will get your "ILT Medicine" and see if ILT is working or +not. + +## Part 1: + +So, again, use Group Policy Preferences and create a new Group Policy Preferences shortcut to +www.1.com , on the DESKTOP, with TARGET URL being www.1.com and pick any icon you want. + +![196_5_img-03](/images/endpointpolicymanager/troubleshooting/log/itemleveltargeting/196_5_img-03.webp) + +## Part 2: + +Use Group Policy Preferences to create a Group Policy Preferences shortcut to www.2.com, on the +DESKTOP, with TARGET URL being www.2.com and pick any icon you want.. then click in the COMMON tab +and select Item Level Targeting, and put in your proposed ILT. + +![196_7_img-04](/images/endpointpolicymanager/troubleshooting/log/itemleveltargeting/196_7_img-04.webp) + +![196_9_img-05](/images/endpointpolicymanager/troubleshooting/log/itemleveltargeting/196_9_img-05.webp) + +Before you test, let's make sure we fully understand the experiment… + +![196_11_img-06](/images/endpointpolicymanager/troubleshooting/log/itemleveltargeting/196_11_img-06.webp) + +Then on the endpoint run GPupdate… Here is the result you should get: + +![196_13_img-07](/images/endpointpolicymanager/troubleshooting/log/itemleveltargeting/196_13_img-07.webp) + +So: + +**Step 1 –** If you only see www.1.com and not www.2.com, then something is wrong with your ILT +evaluation and it is evaluating to FALSE. This evaluation will also evaluate to FALSE in any +Endpoint Policy Manager item. + +**Step 2 –** If you BOTH www.1.com and www.2.com, then your ILT evaluation is evaluating to TRUE and +should also work in any Endpoint Policy Manager item. + +Now… how does Endpoint Policy Manager fit into this? + +If you take the WORKING ILT evaluation and use it in a Endpoint Policy Manager item… and it STILL +doesn't work. Then we can attempt to investigate it. + +That being said if you're really sure an ILT evaluation functions correctly in Group Policy +Preferences (see above) but not in Endpoint Policy Manager … you can continue to troubleshoot by +turning on ILT logging for Endpoint Policy Manager items using this +KB:[How do I turn on Item Level Targeting (ILT) logging if asked by Endpoint Policy Manager Tech Support?](/docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/troubleshooting/itemleveltargeting.md) + +All log files require a support case to analyze. diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/troubleshooting/reportingadm.md b/docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/troubleshooting/reportingadm.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/troubleshooting/reportingadm.md rename to docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/troubleshooting/reportingadm.md diff --git a/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/_category_.json b/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/_category_.json new file mode 100644 index 0000000000..f5151829fd --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/_category_.json @@ -0,0 +1 @@ +{"label":"Videos","position":2,"collapsed":true,"collapsible":true,"link":{"type":"doc","id":"videolearningcenter"}} diff --git a/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/gettingstarted/_category_.json b/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/gettingstarted/_category_.json new file mode 100644 index 0000000000..7eb735f33a --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/gettingstarted/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Getting Started", + "position": 10, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/gettingstarted/explained.md b/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/gettingstarted/explained.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/gettingstarted/explained.md rename to docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/gettingstarted/explained.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/gettingstarted/gettingstartedv.md b/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/gettingstarted/gettingstartedv.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/gettingstarted/gettingstartedv.md rename to docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/gettingstarted/gettingstartedv.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/gettingstarted/install.md b/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/gettingstarted/install.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/gettingstarted/install.md rename to docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/gettingstarted/install.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/gettingstarted/integration.md b/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/gettingstarted/integration.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/gettingstarted/integration.md rename to docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/gettingstarted/integration.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/gettingstarted/renameendpoint.md b/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/gettingstarted/renameendpoint.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/gettingstarted/renameendpoint.md rename to docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/gettingstarted/renameendpoint.md diff --git a/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/tipsandtricks/_category_.json b/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/tipsandtricks/_category_.json new file mode 100644 index 0000000000..6ba42bb498 --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/tipsandtricks/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Tips And Tricks", + "position": 20, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/tipsandtricks/editmanual.md b/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/tipsandtricks/editmanual.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/tipsandtricks/editmanual.md rename to docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/tipsandtricks/editmanual.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/tipsandtricks/exportgpos.md b/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/tipsandtricks/exportgpos.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/tipsandtricks/exportgpos.md rename to docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/tipsandtricks/exportgpos.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/tipsandtricks/flatlegacyview.md b/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/tipsandtricks/flatlegacyview.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/tipsandtricks/flatlegacyview.md rename to docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/tipsandtricks/flatlegacyview.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/tipsandtricks/mmcconsole.md b/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/tipsandtricks/mmcconsole.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/tipsandtricks/mmcconsole.md rename to docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/tipsandtricks/mmcconsole.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/tipsandtricks/remotedesktopconnection.md b/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/tipsandtricks/remotedesktopconnection.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/tipsandtricks/remotedesktopconnection.md rename to docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/tipsandtricks/remotedesktopconnection.md diff --git a/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/videolearningcenter.md b/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/videolearningcenter.md new file mode 100644 index 0000000000..08ed5cc75d --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/videolearningcenter.md @@ -0,0 +1,26 @@ +--- +title: "Video Learning Center" +description: "Video Learning Center" +sidebar_position: 20 +--- + +# Video Learning Center + +See the following Video topics for getting started with Group Policy. + +## Getting Started + +- [Endpoint Policy Manager Explained: In about two minutes](/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/gettingstarted/explained.md) +- [How to create a DC for editing purposes](/docs/endpointpolicymanager/deliverymethods/cloud/videos/testlabbestpractices/createdc.md) +- [Admin Console And CSE Installation](/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/gettingstarted/install.md) +- [Endpoint Policy Manager with Group Policy Method: Getting Started](/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/gettingstarted/gettingstartedv.md) +- [Testing and Troubleshooting By Renaming an endpoint Computer](/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/gettingstarted/renameendpoint.md) +- [Integration with Group Policy (Basics: Installation, Backup, Restore and Reporting !)](/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/gettingstarted/integration.md) + +## Tips and Tricks + +- [Manual editing Item Level Targeting to affect local Admins and other local accounts](/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/tipsandtricks/editmanual.md) +- [Reduce GPOs (and/or export them for use with Endpoint Policy Manager Cloud or with MDM)](/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/tipsandtricks/exportgpos.md) +- [Expand Modular View of Endpoint Policy Manager Components in the GPMC back to the Flat Legacy View](/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/tipsandtricks/flatlegacyview.md) +- [Trim the MMC console for OU admins](/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/tipsandtricks/mmcconsole.md) +- [Prevent a Remote Desktop Connection Drop During GP Update](/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/tipsandtricks/remotedesktopconnection.md) diff --git a/docs/endpointpolicymanager/deliverymethods/mdm/_category_.json b/docs/endpointpolicymanager/deliverymethods/mdm/_category_.json new file mode 100644 index 0000000000..fb88ff7c94 --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/mdm/_category_.json @@ -0,0 +1 @@ +{"label":"MDM","position":30,"collapsed":true,"collapsible":true} diff --git a/docs/endpointpolicymanager/deliverymethods/mdm/knowledgebase/_category_.json b/docs/endpointpolicymanager/deliverymethods/mdm/knowledgebase/_category_.json new file mode 100644 index 0000000000..ebf9bc76c5 --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/mdm/knowledgebase/_category_.json @@ -0,0 +1 @@ +{"label":"Knowledge Base","position":1,"collapsed":true,"collapsible":true,"link":{"type":"doc","id":"knowledgebase"}} diff --git a/docs/endpointpolicymanager/deliverymethods/mdm/knowledgebase/knowledgebase.md b/docs/endpointpolicymanager/deliverymethods/mdm/knowledgebase/knowledgebase.md new file mode 100644 index 0000000000..62aa59c257 --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/mdm/knowledgebase/knowledgebase.md @@ -0,0 +1,13 @@ +--- +title: "Knowledge Base" +description: "Knowledge Base" +sidebar_position: 10 +--- + +# Knowledge Base + +See the following Knowledge Base articles for getting started with MDM. + +## Troubleshooting & Tips and Tricks + +- [How can I "stack" Endpoint Policy Manager MSIs so the XML items inside the MSI execute in a predictable order?](/docs/endpointpolicymanager/deliverymethods/mdm/knowledgebase/troubleshooting/stackmsi.md) diff --git a/docs/endpointpolicymanager/deliverymethods/mdm/knowledgebase/troubleshooting/_category_.json b/docs/endpointpolicymanager/deliverymethods/mdm/knowledgebase/troubleshooting/_category_.json new file mode 100644 index 0000000000..00617ebbec --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/mdm/knowledgebase/troubleshooting/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Troubleshooting And Tips And Tricks", + "position": 10, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/knowledgebase/troubleshooting/stackmsi.md b/docs/endpointpolicymanager/deliverymethods/mdm/knowledgebase/troubleshooting/stackmsi.md similarity index 96% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/knowledgebase/troubleshooting/stackmsi.md rename to docs/endpointpolicymanager/deliverymethods/mdm/knowledgebase/troubleshooting/stackmsi.md index 04a0cc34aa..d7309cee8d 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/knowledgebase/troubleshooting/stackmsi.md +++ b/docs/endpointpolicymanager/deliverymethods/mdm/knowledgebase/troubleshooting/stackmsi.md @@ -11,7 +11,7 @@ MSI. Please get familiar with this tool before continuing to read this article. -[Deploying Endpoint Policy Managerdirectives without Group Policy (Endpoint Policy Manager Exporter Utility)](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/methods/exporterutility.md) +[Deploying Endpoint Policy Managerdirectives without Group Policy (Endpoint Policy Manager Exporter Utility)](/docs/endpointpolicymanager/gettingstarted/misc/videos/methods/exporterutility.md) From time to time you might want a precise processing order of the XML items. You can do this in TWO ways. diff --git a/docs/endpointpolicymanager/deliverymethods/mdm/videos/_category_.json b/docs/endpointpolicymanager/deliverymethods/mdm/videos/_category_.json new file mode 100644 index 0000000000..f5151829fd --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/mdm/videos/_category_.json @@ -0,0 +1 @@ +{"label":"Videos","position":2,"collapsed":true,"collapsible":true,"link":{"type":"doc","id":"videolearningcenter"}} diff --git a/docs/endpointpolicymanager/deliverymethods/mdm/videos/exportingtips/_category_.json b/docs/endpointpolicymanager/deliverymethods/mdm/videos/exportingtips/_category_.json new file mode 100644 index 0000000000..8173e7fcb4 --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/mdm/videos/exportingtips/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Exporting Tips And Tricks", + "position": 20, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/exportingtips/admintemplates.md b/docs/endpointpolicymanager/deliverymethods/mdm/videos/exportingtips/admintemplates.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/exportingtips/admintemplates.md rename to docs/endpointpolicymanager/deliverymethods/mdm/videos/exportingtips/admintemplates.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/exportingtips/exporterutility.md b/docs/endpointpolicymanager/deliverymethods/mdm/videos/exportingtips/exporterutility.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/exportingtips/exporterutility.md rename to docs/endpointpolicymanager/deliverymethods/mdm/videos/exportingtips/exporterutility.md diff --git a/docs/endpointpolicymanager/deliverymethods/mdm/videos/exportingtips/exportgpos.md b/docs/endpointpolicymanager/deliverymethods/mdm/videos/exportingtips/exportgpos.md new file mode 100644 index 0000000000..2af867d828 --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/mdm/videos/exportingtips/exportgpos.md @@ -0,0 +1,11 @@ +--- +title: "Reduce GPOs (and/or export them for use with Endpoint Policy Manager Cloud or with MDM)" +description: "Reduce GPOs (and/or export them for use with Endpoint Policy Manager Cloud or with MDM)" +sidebar_position: 10 +hide_title: true +--- + +import ExportGPOs from '/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/tipsandtricks/exportgpos.md'; + + + diff --git a/docs/endpointpolicymanager/deliverymethods/mdm/videos/gettingstarted/_category_.json b/docs/endpointpolicymanager/deliverymethods/mdm/videos/gettingstarted/_category_.json new file mode 100644 index 0000000000..7eb735f33a --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/mdm/videos/gettingstarted/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Getting Started", + "position": 10, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/gettingstarted/citrixendpointmanager.md b/docs/endpointpolicymanager/deliverymethods/mdm/videos/gettingstarted/citrixendpointmanager.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/gettingstarted/citrixendpointmanager.md rename to docs/endpointpolicymanager/deliverymethods/mdm/videos/gettingstarted/citrixendpointmanager.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/gettingstarted/microsoftintune.md b/docs/endpointpolicymanager/deliverymethods/mdm/videos/gettingstarted/microsoftintune.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/gettingstarted/microsoftintune.md rename to docs/endpointpolicymanager/deliverymethods/mdm/videos/gettingstarted/microsoftintune.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/gettingstarted/mobileiron.md b/docs/endpointpolicymanager/deliverymethods/mdm/videos/gettingstarted/mobileiron.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/gettingstarted/mobileiron.md rename to docs/endpointpolicymanager/deliverymethods/mdm/videos/gettingstarted/mobileiron.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/gettingstarted/realgrouppolicy.md b/docs/endpointpolicymanager/deliverymethods/mdm/videos/gettingstarted/realgrouppolicy.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/gettingstarted/realgrouppolicy.md rename to docs/endpointpolicymanager/deliverymethods/mdm/videos/gettingstarted/realgrouppolicy.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/gettingstarted/testsample.md b/docs/endpointpolicymanager/deliverymethods/mdm/videos/gettingstarted/testsample.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/gettingstarted/testsample.md rename to docs/endpointpolicymanager/deliverymethods/mdm/videos/gettingstarted/testsample.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/gettingstarted/workspaceone.md b/docs/endpointpolicymanager/deliverymethods/mdm/videos/gettingstarted/workspaceone.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/gettingstarted/workspaceone.md rename to docs/endpointpolicymanager/deliverymethods/mdm/videos/gettingstarted/workspaceone.md diff --git a/docs/endpointpolicymanager/deliverymethods/mdm/videos/iltwithscripts/_category_.json b/docs/endpointpolicymanager/deliverymethods/mdm/videos/iltwithscripts/_category_.json new file mode 100644 index 0000000000..53232712c2 --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/mdm/videos/iltwithscripts/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "ILT (With Scripts)", + "position": 30, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/iltwithscripts/entraid.md b/docs/endpointpolicymanager/deliverymethods/mdm/videos/iltwithscripts/entraid.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/iltwithscripts/entraid.md rename to docs/endpointpolicymanager/deliverymethods/mdm/videos/iltwithscripts/entraid.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/iltwithscripts/entraidgroupdetermine.md b/docs/endpointpolicymanager/deliverymethods/mdm/videos/iltwithscripts/entraidgroupdetermine.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/iltwithscripts/entraidgroupdetermine.md rename to docs/endpointpolicymanager/deliverymethods/mdm/videos/iltwithscripts/entraidgroupdetermine.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/iltwithscripts/entraidgroupmembership.md b/docs/endpointpolicymanager/deliverymethods/mdm/videos/iltwithscripts/entraidgroupmembership.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/iltwithscripts/entraidgroupmembership.md rename to docs/endpointpolicymanager/deliverymethods/mdm/videos/iltwithscripts/entraidgroupmembership.md diff --git a/docs/endpointpolicymanager/deliverymethods/mdm/videos/videolearningcenter.md b/docs/endpointpolicymanager/deliverymethods/mdm/videos/videolearningcenter.md new file mode 100644 index 0000000000..3183c18c55 --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/mdm/videos/videolearningcenter.md @@ -0,0 +1,35 @@ +--- +title: "Video Learning Center" +description: "Video Learning Center" +sidebar_position: 20 +--- + +# Video Learning Center + +See the following Video topics for getting started with MDM. + +## Getting Started + +- [Deploying Real Group Policy (and Extra Endpoint Policy Manager Settings) Overview](/docs/endpointpolicymanager/deliverymethods/mdm/videos/gettingstarted/realgrouppolicy.md) +- [How to create a DC for editing purposes](/docs/endpointpolicymanager/deliverymethods/cloud/videos/testlabbestpractices/createdc.md) +- [Endpoint Policy Manager and MDM walk before you run](/docs/endpointpolicymanager/deliverymethods/mdm/videos/gettingstarted/testsample.md) +- [Endpoint Policy Manager and Microsoft Intune](/docs/endpointpolicymanager/deliverymethods/mdm/videos/gettingstarted/microsoftintune.md) +- [Endpoint Policy Manager and MobileIron MDM](/docs/endpointpolicymanager/deliverymethods/mdm/videos/gettingstarted/mobileiron.md) +- [Endpoint Policy Managerand Workspace One (Airwatch) MDM: Deploy Group Policy and Endpoint Policy Manager superpowers today](/docs/endpointpolicymanager/deliverymethods/mdm/videos/gettingstarted/workspaceone.md) +- [Endpoint Policy Managerand Citrix Endpoint Manager: Deploy real Group Policy and Endpoint Policy Manager settings via CEM](/docs/endpointpolicymanager/deliverymethods/mdm/videos/gettingstarted/citrixendpointmanager.md) + +## Exporting, Tips, and Tricks + +- [Reduce GPOs (and/or export them for use with Endpoint Policy Manager Cloud or with MDM)](/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/tipsandtricks/exportgpos.md) +- [Deliver Group Policy Admin Templates Using Your MDM Service](/docs/endpointpolicymanager/deliverymethods/mdm/videos/exportingtips/admintemplates.md) +- [Deploying Endpoint Policy Managerdirectives without Group Policy (Endpoint Policy Manager Exporter Utility)](/docs/endpointpolicymanager/deliverymethods/mdm/videos/exportingtips/exporterutility.md) + +## Troubleshooting + +- [Testing and Troubleshooting By Renaming an endpoint Computer](/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/gettingstarted/renameendpoint.md) + +## ILT (with Scripts) + +- [Determine the Azure AAD Group Membership for User or Computers](/docs/endpointpolicymanager/deliverymethods/mdm/videos/iltwithscripts/entraid.md) +- [Use Endpoint Policy Manager cloud + Azure AAD Group Membership for User or Computers](/docs/endpointpolicymanager/deliverymethods/mdm/videos/iltwithscripts/entraidgroupmembership.md) +- [Use PP MDM to determine the Azure AAD Group Membership for User or Computers](/docs/endpointpolicymanager/deliverymethods/mdm/videos/iltwithscripts/entraidgroupdetermine.md) diff --git a/docs/endpointpolicymanager/deliverymethods/overview.md b/docs/endpointpolicymanager/deliverymethods/overview.md new file mode 100644 index 0000000000..8b0d4b3cb4 --- /dev/null +++ b/docs/endpointpolicymanager/deliverymethods/overview.md @@ -0,0 +1,45 @@ +--- +title: "Delivery Methods Overview" +description: "Delivery Methods Overview" +sidebar_position: 1 +--- + +# Delivery Methods Overview + +Netwrix Endpoint Policy Manager supports multiple delivery methods to suit different organizational needs and infrastructure requirements. Each method offers unique advantages depending on your environment. + +## Available Delivery Methods + +### Cloud Delivery +Modern cloud-based deployment for organizations wanting to minimize on-premises infrastructure: + +- **[Cloud Manual](/docs/endpointpolicymanager/deliverymethods/cloud/)** - Comprehensive cloud deployment guidance +- **Key Benefits**: No server infrastructure required, automatic updates, simplified management +- **Best For**: Organizations with cloud-first strategies, remote workforces, simplified IT environments + +### Group Policy Delivery +Traditional Active Directory Group Policy deployment for domain-joined environments: + +- **[Group Policy](/docs/endpointpolicymanager/deliverymethods/grouppolicy/)** - Complete Group Policy implementation guide +- **Key Benefits**: Leverages existing AD infrastructure, familiar to Windows administrators, centralized policy management +- **Best For**: Domain-joined environments, organizations with established AD infrastructure + +### MDM Delivery +Mobile Device Management integration for modern device management scenarios: + +- **[MDM Manual](/docs/endpointpolicymanager/deliverymethods/mdm/)** - MDM deployment and configuration guide +- **Key Benefits**: Integrates with existing MDM solutions, supports BYOD scenarios, modern device management +- **Best For**: Mixed environments, BYOD programs, organizations using Microsoft Intune or other MDM solutions + +## Choosing the Right Method + +Consider these factors when selecting your delivery method: + +- **Infrastructure**: Do you have Active Directory? Are you cloud-first? +- **Device Management**: Domain-joined vs. Azure AD joined vs. unmanaged devices +- **Administrative Preference**: Traditional GPO management vs. modern cloud management +- **Hybrid Requirements**: Some organizations use multiple methods for different device populations + +## Getting Started + +Each delivery method section contains detailed implementation guides, best practices, and troubleshooting information specific to that deployment model. \ No newline at end of file diff --git a/docs/endpointpolicymanager/gettingstarted.md b/docs/endpointpolicymanager/gettingstarted.md deleted file mode 100644 index 8adfaa5dd7..0000000000 --- a/docs/endpointpolicymanager/gettingstarted.md +++ /dev/null @@ -1,129 +0,0 @@ ---- -title: "Getting Started" -description: "Getting Started" -sidebar_position: 2 ---- - -# Getting Started - -To help get you started, this topic points you towards videos that will get you on the road and -working with Netwrix Endpoint Policy Manager (formerly PolicyPak) quickly. - -## The Portal and Downloads - -In order to get the latest Endpoint Policy Manager downloads, you need access to the Endpoint Policy -Manager Customer Portal (shown in Figure 1). You can only get access to the portal from a Endpoint -Policy Manager sales associate. - -![getting_started_right_away](/images/endpointpolicymanager/getting_started_right_away.webp) - -Figure 1. Inside the Endpoint Policy Manager Customer Portal. - -:::note -Video: For an overview on how to use the Endpoint Policy Manager Customer Portal and -understand subscriptions, please watch the following video: -[https://www.endpointpolicymanager.com/video/endpointpolicymanager-portal-how-to-download-endpointpolicymanager-and-get-free-training.html](https://www.endpointpolicymanager.com/video/endpointpolicymanager-portal-how-to-download-endpointpolicymanager-and-get-free-training.html) -::: - - -Go to the Download section and select "Download Everything (Bits, Paks, Manuals but not Advice)," -and you will get a ZIP file with manuals. You will also receive the following: - -- A ZIP file containing all pre-configured AppSets for Endpoint Policy Manager Application Settings - Manager -- An ISO or ZIP file with the Endpoint Policy Manager installation files and licensing utility - -The Endpoint Policy Manager installation files are delivered as both ZIP and ISO so you can use -Endpoint Policy Manager in virtual environments (which can easily mount ISO files) or burn a CD of -the contents. - -You may also want to utilize the free 7-Zip program to open ZIP or ISO downloads and extract the -files. Download 7-Zip from [http://www.7-zip.org/](http://www.7-zip.org/). In Figure 2, you can see -the list of files and directories that are inside the Endpoint Policy Manager ZIP or ISO download. - -![getting_started_right_away_1](/images/endpointpolicymanager/getting_started_right_away_1.webp) - -Figure 2. The folders that are inside the download. - -Following is a description of what each folder contains and where it should be installed. - -### Licensing for All On-Premise Products - -The licensing for All On-Premise Products contains the licensing utility needed to request and -implement Endpoint Policy Manager license keys. We will be discussing the utility (LT.exe) later. - -### Admin Console MSI for all On-Premise Products - -The Admin Console MSI for all On-Premise Products is installed on your management stations (wherever -you have the GPMC) or in the location where you wish to create Endpoint Policy Manager directives. -This installation also has the Endpoint Policy Manager Exporter and Group Policy Object (GPO) touch -utility (both are explained later). Once this is installed, you'll see a Endpoint Policy Manager -node whenever you edit a GPO. You can choose between a 32-bit and a 64-bit file. - -### Client-Side Extension (CSE) for All On-Premise Products - -The Client-Side Extension (CSE) for All On-Premise Products is installed on every client machine -(Windows 7 and later, Terminal Services (RDS), and Citrix). You can choose between a 32-bit and a -64-bit file. - -### PolicyPak ADMX (Troubleshooting) - -Endpoint Policy Manager ADMX (Troubleshooting) is meant to be used in conjunction with minor -configuration changes or working with tech support. These are ADMX files that can be placed in your -local or central Group Policy store to provide configurable options. - -### PolicyPak Application Manager Extras - -Endpoint Policy Manager Application Manager Extras contains the Endpoint Policy Manager DesignStudio -installer, which is used to create your own AppSets for Endpoint Policy Manager Application Settings -Manager. - -### PolicyPak Extras - -Endpoint Policy Manager Extras contains some miscellaneous utilities and helper tools. - -### PolicyPak Group Policy Compliance Reporter - -Endpoint Policy Manager Group Policy Compliance Reporter contains the Endpoint Policy Manager Group -Policy Compliance Reporter console and Endpoint Policy Manager Group Policy Compliance Reporter -server (optional) for Group Policy reporting. Note that the Compliance Reporter must be specifically -licensed. - -## Get Licensed - -With the exception of Endpoint Policy Manager Cloud (which is self licensed), Endpoint Policy -Manager requires the endpoint to be licensed to work with the components you wish to use. Therefore, -for Endpoint Policy Manager to work after you download everything from the portal, you need to do -the following: - -**Step 1 –** Request a license and send that key to Sales for processing. You can watch a video on -how to request a license at the following link: -[How to Request Licenses from Endpoint Policy Manager by Creating a "License Request Key"](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/requestall/licenserequestkey.md). - -**Step 2 –** Receive a license and install it. You can watch a video on how to install the license -you receive at the following -link:[How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/installall/installuniversal.md). - -## Get Started with the GPO Method - -Most customers want to use Endpoint Policy Manager with Group Policy. You can watch the getting -started video on how to install and run some initial tests at the following link: -[Endpoint Policy Manager with Group Policy Method: Getting Started](/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/gettingstarted/gettingstartedv.md). - -## GetStarted with the Endpoint Policy Manager Cloud Method - -If you want to get started right away with Endpoint Policy Manager Cloud, watch this video for a -quick overview: [Endpoint Policy Manager Cloud: QuickStart](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/quickstart.md). - -## Get Started with Your MDM Provider or UEM Tool - -Getting started with your mobile device management (MDM) provider or UEM tool takes a few more steps -than is covered in one video. In this case, instead of a single video, we recommend you watch each -of the videos at the links below in order to get prepared to use Endpoint Policy Manager with your -MDM provider. - -- For video overviews of using Endpoint Policy Manager with an MDM service see: Getting Started with - MDM > [Video Learning Center](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/videolearningcenter.md). -- For video overviews of using Endpoint Policy Manager with a UEM tool like SCCM see: Getting - Started with Endpoint Policy Manager (Misc) > - [Knowledge Base](/docs/endpointpolicymanager/knowledgebase/knowledgebase.md). diff --git a/docs/endpointpolicymanager/gettingstarted/_category_.json b/docs/endpointpolicymanager/gettingstarted/_category_.json new file mode 100644 index 0000000000..4429446868 --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Getting Started", + "position": 2, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/gettingstarted/basicconcepts/_category_.json b/docs/endpointpolicymanager/gettingstarted/basicconcepts/_category_.json new file mode 100644 index 0000000000..019e1264ec --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/basicconcepts/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Introduction and Basic Concepts", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "basicconcepts" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/basicconcepts/basicconcepts.md b/docs/endpointpolicymanager/gettingstarted/basicconcepts/basicconcepts.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/basicconcepts/basicconcepts.md rename to docs/endpointpolicymanager/gettingstarted/basicconcepts/basicconcepts.md diff --git a/docs/endpointpolicymanager/gettingstarted/basicconcepts/editions/_category_.json b/docs/endpointpolicymanager/gettingstarted/basicconcepts/editions/_category_.json new file mode 100644 index 0000000000..50faa544c2 --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/basicconcepts/editions/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Editions, Solutions, Paks, and Policies", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/basicconcepts/editions/overview.md b/docs/endpointpolicymanager/gettingstarted/basicconcepts/editions/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/basicconcepts/editions/overview.md rename to docs/endpointpolicymanager/gettingstarted/basicconcepts/editions/overview.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/basicconcepts/editions/paks.md b/docs/endpointpolicymanager/gettingstarted/basicconcepts/editions/paks.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/basicconcepts/editions/paks.md rename to docs/endpointpolicymanager/gettingstarted/basicconcepts/editions/paks.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/basicconcepts/editions/policies.md b/docs/endpointpolicymanager/gettingstarted/basicconcepts/editions/policies.md similarity index 80% rename from docs/endpointpolicymanager/manuals/introductionandquick/basicconcepts/editions/policies.md rename to docs/endpointpolicymanager/gettingstarted/basicconcepts/editions/policies.md index df644e6a0c..d49eac1cba 100644 --- a/docs/endpointpolicymanager/manuals/introductionandquick/basicconcepts/editions/policies.md +++ b/docs/endpointpolicymanager/gettingstarted/basicconcepts/editions/policies.md @@ -31,7 +31,7 @@ Policy Manager Application Settings Manager directives over the Internet, even t machines. **Note**: For more information on this topic, please see this video: -[What is Endpoint Policy Application Manager (Cloud Edition)](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/whatdoesitdo/cloud.md). +[What is Endpoint Policy Application Manager (Cloud Edition)](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/whatdoesitdo/cloud.md). ## Least Privilege Manager @@ -45,7 +45,7 @@ Manager Least Privilege Manager can deploy directives over the Internet, even to machines. For more information on this topic, please see this video: -[Video Learning Center](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/videolearningcenter.md) > Privilege Manager. +[Video Learning Center](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/videolearningcenter.md) > Privilege Manager. :::note Note that Endpoint Policy Manager Least Privilege Manager has two versions: Standard and @@ -71,7 +71,7 @@ service, you can also deliver these Endpoint Policy Manager Browser Router setti Internet to domain-joined and non-domain-joined machines. **Note**: For more information on this topic, please see this video: -[Video Learning Center](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/videolearningcenter.md) > Browser Router +[Video Learning Center](/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/videolearningcenter.md) > Browser Router ## Java Enterprise Rules Manager @@ -84,7 +84,7 @@ Enterprise Rules Manager can deploy most Microsoft Security settings to computer even to non-domain-joined machines. **Note**: For more information on this topic, please see this -video:[Video Learning Center](/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/videolearningcenter.md) > Java +video: [Video Learning Center](/docs/endpointpolicymanager/components/javaenterpriserules/videos/videolearningcenter.md) > Java Enterprise Rules Manager . ## Admin Templates Manager @@ -101,7 +101,7 @@ Template (or third-party ADMX setting) to computers over the Internet, even to n machines. **Note**: For more information on this topic, please see this -video:[Administrative Templates Manager](/docs/endpointpolicymanager/manuals/gporeductionandtrans/adminstrativetemplat/overview.md). +video: [Administrative Templates Manager](/docs/endpointpolicymanager/components/admintemplatesmanager/manual/overview.md). ## File Associations Manager @@ -110,12 +110,12 @@ as .pdf) to specific applications, like Acrobat Reader (standard apps and Window apps), and handling applications with protocols (such as MAILTO:). **Note**: For more information on this topic, please see this video: -[Video Learning Center](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/videolearningcenter.md) > File Associations +[Video Learning Center](/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/videolearningcenter.md) > File Associations Manager. ## Preferences Manager -Endpoint Policy Manager Preferences Manager keepsw Group Policy Preferences working and compliant, +Endpoint Policy Manager Preferences Manager keeps Group Policy Preferences working and compliant, even when the computer goes offline. It enables you to deploy Group Policy Preference items without using Group Policy. For instance, by @@ -127,12 +127,12 @@ deploys Group Policy Preference items over the Internet, even to non-domain-join The license for this policy is not provided unless specifically requested by the customer when Endpoint Policy Manager is used with the Group Policy delivery mechanism. For more details on why the license is not automatically provided, please see the following link: -[Where is my Endpoint Policy Manager Preferences Component license and how do I request one?](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicypreferences/componentlicense.md). +[Where is my Endpoint Policy Manager Preferences Component license and how do I request one?](/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicypreferences/componentlicense.md). ::: **Note**: For more information on this topic, please see this -video:[Preferences Manager](/docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/overview.md) +video: [Preferences Manager](/docs/endpointpolicymanager/components/preferencesmanager/manual/overview.md) ## Security Settings Manager @@ -145,7 +145,7 @@ Security Manager can deploy most Microsoft Security settings to computers over t non-domain-joined machines. **Note**: For more information on this topic, please see this video: -[Security Settings Manager](/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/securitysettings/overview.md). +[Security Settings Manager](/docs/endpointpolicymanager/components/securitysettingsmanager/manual/overview.md). ## Start Screen & Taskbar Manager @@ -158,12 +158,12 @@ Additionally, you can use this component to pin items to the Windows 10 taskbar. :::note You may wish to watch our Quickstart videos of Endpoint Policy Manager Start Screen & Taskbar Manager: Start Screen & Task Bar Manager > -[Video Learning Center](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/videolearningcenter.md). +[Video Learning Center](/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/videolearningcenter.md). ::: **Note**: For more information on this topic, please see this video: -[Video Learning Center](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/videolearningcenter.md) > Start Screen & Task +[Video Learning Center](/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/videolearningcenter.md) > Start Screen & Task Bar Manager ## Scripts & Triggers Manager @@ -175,7 +175,7 @@ In conjunction with Endpoint Policy Manager Cloud or your own MDM service, you c deploy software over the Internet, even to non-domain-joined machines. **Note**: For more information on this topic, please see this -video:[Video Learning Center](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/videolearningcenter.md) > Scripts & +video: [Video Learning Center](/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/videolearningcenter.md) > Scripts & Triggers Manager. ## Remote Work Delivery Manager @@ -187,7 +187,7 @@ In conjunction with Endpoint Policy Manager Cloud or your own MDM service, you c connections over the Internet, even to non-domain-joined machines. **Note**: For more information on this topic, please see this video: Remote Work Delivery Manager > -[Video Learning Center](/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/videolearningcenter.md). +[Video Learning Center](/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/videolearningcenter.md). ## Feature Manager for Windows @@ -199,7 +199,7 @@ Cloud or your own MDM service, Endpoint Policy Manager Feature Manager for Windo the Windows features and options on machines over the Internet, even to non-domain-joined machines. **Note**: For more information on this topic, please see this -video:[Video Learning Center](/docs/endpointpolicymanager/knowledgebase/featuremanager/videolearningcenter/videolearningcenter.md) > Feature Manager for +video: [Video Learning Center](/docs/endpointpolicymanager/components/featuremanager/videos/videolearningcenter.md) > Feature Manager for Windows . ## Remote Desktop Protocol Manager @@ -211,7 +211,7 @@ In conjunction with Endpoint Policy Manager Cloud or your own MDM service, you c that add or remove .rdp file connections over the Internet, even to non-domain-joined machines. **Note**: For more information on this topic, please see this -video:[Video Learning Center](/docs/endpointpolicymanager/knowledgebase/endpointpolicyrdp/videolearningcenter/videolearningcenter.md). +video: [Video Learning Center](/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/videos/videolearningcenter.md). ## Network Security Manager @@ -219,7 +219,7 @@ You can use Network Security Manager to specify which processes and applications what IP, web addresses and over what protocols. **Note**: For more information on this topic, please see this -video:[Video Learning Center](/docs/endpointpolicymanager/knowledgebase/networksecuritymanager/videolearningcenter/videolearningcenter.md) > Network Security +video: [Video Learning Center](/docs/endpointpolicymanager/components/networksecuritymanager/videos/videolearningcenter.md) > Network Security Manager ## Software Package Manager @@ -232,5 +232,5 @@ which add or remove Microsoft Store application connections over the Internet, e non-domain-joined machines. **Note**: For more information on this topic, please see this video: -[Video Learning Center](/docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/videolearningcenter.md) > Software Package +[Video Learning Center](/docs/endpointpolicymanager/components/softwarepackage/videos/videolearningcenter.md) > Software Package Manager. diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/basicconcepts/editions/solutions.md b/docs/endpointpolicymanager/gettingstarted/basicconcepts/editions/solutions.md similarity index 87% rename from docs/endpointpolicymanager/manuals/introductionandquick/basicconcepts/editions/solutions.md rename to docs/endpointpolicymanager/gettingstarted/basicconcepts/editions/solutions.md index d6fbb1e3da..23b8d6d141 100644 --- a/docs/endpointpolicymanager/manuals/introductionandquick/basicconcepts/editions/solutions.md +++ b/docs/endpointpolicymanager/gettingstarted/basicconcepts/editions/solutions.md @@ -30,7 +30,7 @@ details of where Endpoint Policy Manager data is stored. The most popular method of using Endpoint Policy Manager is via Group Policy. **Note**: For more information on this topic, please see this -video:[Knowledge Base](/docs/endpointpolicymanager/knowledgebase/knowledgebase.md) > Group Policy +video:[Knowledge Base](/docs/endpointpolicymanager/) > Group Policy When you use the Group Policy method, you are 100% in control of your data because it is all contained within your Active Directory.The image below shows what Endpoint Policy Manager looks like @@ -78,10 +78,10 @@ URLs to Group Policy management videos. | Product Name | Video link to Endpoint Policy Manager and the Group Policy Management Product | | ------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| Microsoft AGPM (Advanced Group Policy Management) | [Endpoint Policy Manager and AGPM](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/changemanagementutilities/advancedgrouppolicymanagement.md) | -| Quest GPO Administrator | [Endpoint Policy Manager and Quest's GPOADmin Tool](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/changemanagementutilities/gpoadmintool.md) | -| Quest Active Administrator | [Endpoint Policy Manager and Quest (ScriptLogic) ActiveAdministrator](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/changemanagementutilities/scriptlogicactiveadministrator.md) | -| NetIQ Group Policy Administrator | [Endpoint Policy Manager Integrates with NetIQ GPA](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/changemanagementutilities/netiq.md) | +| Microsoft AGPM (Advanced Group Policy Management) | [Endpoint Policy Manager and AGPM](/docs/endpointpolicymanager/gettingstarted/misc/videos/changemanagementutilities/advancedgrouppolicymanagement.md) | +| Quest GPO Administrator | [Endpoint Policy Manager and Quest's GPOADmin Tool](/docs/endpointpolicymanager/gettingstarted/misc/videos/changemanagementutilities/gpoadmintool.md) | +| Quest Active Administrator | [Endpoint Policy Manager and Quest (ScriptLogic) ActiveAdministrator](/docs/endpointpolicymanager/gettingstarted/misc/videos/changemanagementutilities/scriptlogicactiveadministrator.md) | +| NetIQ Group Policy Administrator | [Endpoint Policy Manager Integrates with NetIQ GPA](/docs/endpointpolicymanager/gettingstarted/misc/videos/changemanagementutilities/netiq.md) | ## MDM Method @@ -89,7 +89,7 @@ You can use Endpoint Policy Manager with your mobile device management (MDM) ser as Microsoft Endpoint Manager (SCCM and Intune), MobileIron, or VMware Workspace ONE. **Note**: For more information on this topic, please see this -video:[Video Learning Center](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/videolearningcenter.md) > Started with MDM. +video:[Video Learning Center](/docs/endpointpolicymanager/deliverymethods/mdm/videos/videolearningcenter.md) > Started with MDM. To get started, create directives using the Endpoint Policy Manager MMC, follow these steps: @@ -110,7 +110,7 @@ with the MDM service deploying the Endpoint Policy Manager CSE and license files If you plan to use Endpoint Policy Manager with your MDM service, you can find more information about the Endpoint Policy Manager exporter in this topic: -[Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/uemtools.md)Using with MDM and UEM +[Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/uemtools.md)Using with MDM and UEM Tools. ## Cloud Method @@ -120,7 +120,7 @@ Policy Manager directives and deliver them through the Internet. :::note For a video overview of Endpoint Policy Manager Cloud, see -[Endpoint Policy Manager Cloud: QuickStart](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/quickstart.md). +[Endpoint Policy Manager Cloud: QuickStart](/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/quickstart.md). ::: @@ -131,7 +131,7 @@ Cloud method is the only method available to you. ![editions_solutions_paks_and_4](/images/endpointpolicymanager/editions/editions_solutions_paks_and_4.webp) For a more detailed coverage of Endpoint Policy Manager Cloud see the quick start topic:  Endpoint -Policy Manager [Setup, Download, Install, and Verify](/docs/endpointpolicymanager/manuals/introductionandquick/cloud/quickstart/quickstart.md). +Policy Manager [Setup, Download, Install, and Verify](/docs/endpointpolicymanager/gettingstarted/cloudmanual/quickstart/quickstart.md). ## Cloud Hybrid Method @@ -140,12 +140,12 @@ installed on the endpoint. Once this is done, it claims a license. Then, Endpoin performs the work. Some customers may want to bootstrap the installation of the Endpoint Policy Manager Cloud client using an RMM or MDM tool they already have hooked into the client. More details on how to do this can be found in the quick start topic: -[Setup, Download, Install, and Verify](/docs/endpointpolicymanager/manuals/introductionandquick/cloud/quickstart/quickstart.md) +[Setup, Download, Install, and Verify](/docs/endpointpolicymanager/gettingstarted/cloudmanual/quickstart/quickstart.md) :::note For a video overview of using Endpoint Policy Manager with an MDM or RMM tool to bootstrap the Endpoint Policy Manager Cloud installer, see: -[Endpoint Policy Manager Cloud + MDM Services: Install Cloud Client + automatically join PPC Groups and get policy.](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/usingwithothermethods/mdm.md). +[Endpoint Policy Manager Cloud + MDM Services: Install Cloud Client + automatically join PPC Groups and get policy.](/docs/endpointpolicymanager/deliverymethods/cloud/videos/usingwithothermethods/mdm.md). ::: @@ -167,7 +167,7 @@ Below we can see what Endpoint Policy Manager would look like using a tool like We provide the Endpoint Policy Manager Exporter Tool. This topic is not discussed in this section but you can get more information here: -[Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/uemtools.md). +[Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/uemtools.md). ![editions_solutions_paks_and_6](/images/endpointpolicymanager/editions/editions_solutions_paks_and_6.webp) @@ -196,4 +196,4 @@ Directory and it's active, it counts your Endpoint Policy Manager licensing. In use it with Endpoint Policy Manager SaaS/Cloud. For more answers about licensing Endpoint Policy Manager with virtualized systems, see: -[Knowledge Base](/docs/endpointpolicymanager/knowledgebase/knowledgebase.md) > All Things Licensing. +[Knowledge Base](/docs/endpointpolicymanager/) > All Things Licensing. diff --git a/docs/endpointpolicymanager/gettingstarted/basicconcepts/licensing.md b/docs/endpointpolicymanager/gettingstarted/basicconcepts/licensing.md new file mode 100644 index 0000000000..c5caad2a6b --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/basicconcepts/licensing.md @@ -0,0 +1,300 @@ +--- +title: "Licensing" +description: "Licensing" +sidebar_position: 20 +--- + +# Licensing + +Licensing Netwrix Endpoint Policy Manager (formerly PolicyPak) is easy. We have one tool to request +information about Active Directory and Intune. + +:::note +For a video overview of the process, watch this tutorial: +[How to Request Licenses from Endpoint Policy Manager by Creating a "License Request Key"](/docs/endpointpolicymanager/licensing/videolearningcenter/requestall/licenserequestkey.md) +::: + + +Here are the basics: + +- Endpoint Policy Manager is licensed on a per-client-computer basis. All client computers (desktop, + laptop, and virtual desktop infrastructure [VDI]) must be licensed if you want Endpoint Policy + Manager policies to apply and enforce settings. +- Endpoint Policy Manager is also licensed per concurrent-session-connection for your Terminal + Services (RDS) or Citrix servers. All inbound Terminal Services (RDS) or Citrix XenApp connections + must be licensed if you want Endpoint Policy Manager to apply and enforce settings. +- Endpoint Policy Manager can also be licensed in conjunction with an MDM service such as Intune, + Workspace ONE, or MobileIron. This scenario is covered later in this guide and in detail in + Appendix A: Using Endpoint Policy Manager with MDM and UEM Tools. + +:::note +To be in compliance with Endpoint Policy Manager licensing, you must license inbound +Terminal Services (RDS) or Citrix connections. These are simply added to the count of your Endpoint +Policy Manager licenses. For instance, if you want to use Endpoint Policy Manager with 500 desktops, +200 laptops, and 100 concurrent Terminal Services or Citrix session connections, then you will need +800 Endpoint Policy Manager licenses. Full details of how Endpoint Policy Manager licenses Terminal +Services (RDS) or Citrix inbound connections can be found at the following link: +[http://www.endpointpolicymanager.com/purchasing/citrix-licensing-scenarios.html](http://www.endpointpolicymanager.com/purchasing/citrix-licensing-scenarios.html). +::: + + +In other words, to be fully compliant, you must license the number of computers in Active Directory +plus the inbound Terminal Services (RDS) and/or Citrix connections. If you don't wish to run +Endpoint Policy Manager on your Terminal Services (RDS) or Citrix machines, then these inbound +connections do not need to be declared at purchase time. + +Once a computer is licensed, the trial mode restrictions are lifted. (The computer can be named +anything.) Virtual desktops (any VDI, including Windows Virtual Desktops) are licensed the same way +that real desktops and laptops are licensed. In short, we count the number of computer account +records in Active Directory. For most customers, all areas of Endpoint Policy Manager licensing are +handled by the Endpoint Policy Manager licensing tool (named LT.exe), which is included in the +Licensing for All On-Prem Products folder inside the ISO download. + +Endpoint Policy Manager licenses themselves can be deployed within Group Policy Objects (GPOs), or +delivered via MSI. Client computers download the GPO with the license file or the MSI with the +license file, and automatically determine if they are licensed. Be aware that the Endpoint Policy +Manager licensing tool (LT) is used with the Active Directory solution method and Intune, and not +other MDM services like VMware Workspace ONE. In those cases, you'll work with your sales team to +demonstrate how many machines are MDM-enrolled. + +:::note +To be in compliance with Endpoint Policy Manager licensing on Citrix and Terminal Services +(RDS), you must run LT on a server. When LT is run on a server, it is usually able to count Terminal +Services and Citrix connections and report them. Even if LT does not properly count the Citrix and +Terminal Services licenses, you are still bound by the End User License Agreement to report them for +licensing purposes. +::: + + +Endpoint Policy Manager's LT utility can also help you minimize costs by finding and disabling +unused computers. For instance, many organizations have dozens or hundreds of computers that have +not been logged onto for months. Since you pay on a per-computer basis with Endpoint Policy Manager +in Active Directory, we don't want you paying for computers you're not actually using. If you'd like +to find and disable unused computers, LT can help you do that before you make your initial license +request. If you want more information on this, jump to the section "Finding and Disabling Unused +Computers." + +Licensing occurs in two phases: + +- Phase I: Get a License Request Key.In this phase, LT will ask several questions—such as where you + want to license it—and will then help you generate your license request. This license is usually + good for one year, depending on your contract with Endpoint Policy Manager. +- Phase II: Re-run and get another License Request Key. Once the initial license year is up, you + simply re-run the Endpoint Policy Manager LT utility each following year. LT will review existing + installed licenses and do a count of computers. You need to perform this step every year + (according to your Endpoint Policy Manager license agreement) to continue to use Endpoint Policy + Manager. Otherwise, Endpoint Policy Manager will stop functioning on your anniversary date. You + pay for any overage from the previous year. + +## Finding and Disabling Unused Computers + +We only want you to pay for the computers you're actually going to use with the Endpoint Policy +Manager. Endpoint Policy Manager's LT has an option, "Find and Disable unused computers," as seen in +Figure 12. + +![licensing_policypak](/images/endpointpolicymanager/licensing_endpointpolicymanager.webp) + +Figure 12. The option to disable unused computers. + +When you select this option, you are led through an wizard that finds any computers that have not +been logged into for 90 days (or any other number of days you select). You can then select the +computers you want to disable and click "Next," as shown in Figure 13. + +![licensing_policypak_1](/images/endpointpolicymanager/licensing_endpointpolicymanager_1.webp) + +Figure 13. Selecting the unused computers. + +Note that you can also choose to include computers that no users have ever logged onto. All +computers that you select will be disabled when you click "Next." By doing so, you will have fewer +computers in your count and thus fewer to pay for. + +:::note +Endpoint Policy Manager's LT utility cannot re-enable accounts once they've been disabled. +Also, Endpoint Policy Manager's LT utility cannot move computer accounts after they are disabled. +::: + + +## Licensing Modes + +Licensing with Endpoint Policy Manager involves the following items: + +- A license for a component +- The component's capability if applicable (for instance, Least Privilege Manager has Standard and + Complete capabilities) +- A scope +- For Active Directory: a whole Active Directory Domain or specific organizational units (OUs) +- For MDM: a specific UPN or company name +- For Endpoint Policy Manager Cloud: licensed by Endpoint Policy Manager Cloud +- An enablement method +- Group Policy +- MDM (used with your MDM provider) +- Endpoint Policy Manager Cloud +- XML Method (used alongside a UEM tool, like SCCM) + +You can purchase some (or all) Paks, and then choose the enablement methods and dictate the licensed +scopes. In the XML example license file below, the customer has selected the following: + +- Specific Paks which entitle them to specific policies and specific capabilities if applicable (for + instance, Least Privilege Manager and Software Package Manager have specific capabilities) +- A whole domain for the scope (Fabrikam.com) +- Enablement methods "GP-POLICIES" and "XML-POLICIES" + + ``` + +                                  + Example (Customertest)                 + 2021-03-09                 + 2021-03-31                 + false                 +                  +                  +                  +                  + gp-policies                 + xml-policies                 +                  +                  +                  +                  +                  +                  +                  + complete                 +                  +                  +                  +                  + appx                 +                  +                  +                  +                  +                  +                  +                  +                  + ABCDEF==                 +                  + + ``` + +The licensing modes are: + +- Licensed Mode (temporary). When a computer is licensed (temporarily for 30 days or licensed for + one year), it is permitted to process all directives intended for it. In Licensed Mode, there is + no limit to the number of Endpoint Policy Manager directives a client machine will process and + keep compliant. +- Trial Mode. Trial Mode functions similarly to Licensed Mode. Trial Mode enables you to try + Endpoint Policy Manager very quickly in your test lab or real Active Directory. Trial Mode is + enabled when your test computers' names have the word "computer" in them. For instance, a computer + named "COMPUTER1" would automatically be in Trial Mode and act as if fully licensed. To see an + example of how and why this works, see this video: + [Testing and Troubleshooting By Renaming an endpoint Computer](/docs/endpointpolicymanager/deliverymethods/cloud/videos/testlabbestpractices/renameendpoint.md) + +We want you to use this Endpoint Policy Manager in your testing similarly to how you would use it in +the real world. So in Trial Mode, we allow you to do the following: + +- Deploy the client-side extension (CSE) to all the test machines you want to manage +- Install the GPMC admin console on a management station +- Fully test the software with any number of users and computers (provided the computer name has the + word "computer" in it) + +These restrictions allow you to use your own test lab or Active Directory OU to try the Endpoint +Policy Manager components. You'll be able to see what happens when you make central changes and +watch your clients react. + +## Licensing Endpoint Policy Manager with Your Own MDM Service + +Endpoint Policy Manager can be used in conjunction with your own MDM service, such as Workspace ONE +or MobileIron. However, licensing Endpoint Policy Manager with these utilities is a bit different +than licensing Endpoint Policy Manager with Active Directory or Intune. In short, you need to work +with your sales team to declare the number of Windows 10 machines you want to license. Typically, +you would use the MDM reporting system to express how many Windows 10 machines you have enrolled and +the number you plan add in the current year. All the details on exactly how to perform a count and +what to send back to Endpoint Policy Manager Sales can be found here: +[When licensing Endpoint Policy Managerwith an MDM provider, what do I need to send in to Endpoint Policy Manager? ](/docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/setup.md). + +An example of an MDM system account with a very low number of machines can be seen in Figure 14. +Note that the company information is obscured in this demonstration, but you would have to provide +it. + +![licensing_policypak_2](/images/endpointpolicymanager/licensing_endpointpolicymanager_2.webp) + +Figure 14. An example of an MDM system account. + +## License Requests + +Once you have ensured that your license request contains all computers that you want to license, +save the file, and then deliver this to your Endpoint Policy Manager sales representative to receive +a license file. + +:::note +The resulting XML file is tamper-proof and will be invalid if the number of elements is +changed after creation. +::: + + +## License Files + +You may receive multiple license files for Endpoint Policy Manager: + +To deploy your licenses, you can use the following: + +Use these key installation instructions (which demonstrate Active Directory, SCCM, and MDM methods): +[How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/licensing/videolearningcenter/installall/installuniversal.md) + +## Licensing Endpoint Policy Manager Through Endpoint Policy Manager Cloud + +Endpoint Policy Manager Cloud has a licensing mechanism build in. When a computer acquires a +license, it stays licensed unless it becomes unused for an amount of time. (See Appendix E: Endpoint +Policy Manager Cloud Quickstart and User Guide for more details on this.) However, there is one +caveat around a licensing scenario in which an acquired Endpoint Policy Manager Cloud license could +possibly enable the Active Directory method. Below is the breakdown of how this works. + +### Legacy Endpoint Policy Manager Cloud monthly or yearly customers: + +When clients consume licenses from Endpoint Policy Manager Cloud, they automatically pick up Group +Policy as well (for free). So if you're a Endpoint Policy Manager Cloud customer, you don't need to +also license the machine for Group Policy. Being able to use Group Policy as the settings delivery +mechanism is automatic because the client has consumed the Cloud license. In this way, you get a +free on-premise (Group Policy Edition) license automatically when a client has consumed a license +with Endpoint Policy Manager Cloud (and continues to check in within the check-in period). For +information on how to do this, see this video: +[Endpoint Policy ManagerStart Screen & Taskbar Manager: Manage non-domain joined machines using Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/methods/nondomainjoined.md). + +### Endpoint Policy Manager Professional and Endpoint Policy Manager Enterprise Edition customers: + +In this case, your Universal License key will have to be enabled for the Group Policy method. You +will not be able to automatically enable the Group Policy method when being licensed via Endpoint +Policy Manager Cloud. + +### Endpoint Policy Manager SaaS/Cloud-only customers: + +In this case, you cannot use Endpoint Policy Manager Cloud to enable the Group Policy method. If you +wish to enable the Group Policy method, you need to transition from Endpoint Policy Manager SaaS to +Endpoint Policy Manager Enterprise Edition or Endpoint Policy Manager Professional Edition. You can +still manage Active Directory joined machines, but you must use the Endpoint Policy Manager Cloud +delivery mechanism to perform the operation, and not Active Directory or a GPO. + +## Final Licensing Thoughts + +Once you've tested Endpoint Policy Manager, you'll be ready to become a part of the licensed +Endpoint Policy Manager family. The following are a few reminders on licensing: + +- Endpoint Policy Manager is licensed on a per-computer basis. +- When Endpoint Policy Manager is fully licensed, the restriction on the computer name is lifted. +- The Endpoint Policy Manager client-side extension (CSE) will not function unless it's in Trial + Mode (the computer name has the word "computer" in it) or the CSE has a time-based licensed where + the scope is correct. + +Note that you only need to install the CSE once on the client machines you want to use. When you are +unlicensed, Endpoint Policy Manager stops working. When you are licensed, it will fully process all +Endpoint Policy Manager directives. + +Volume licenses and domain-wide licenses for Endpoint Policy Manager are available. + +:::note +For an overview and FAQ of the licensing process, please visit: +[http://www.endpointpolicymanager.com/support-sharing/licensing-faq.html](http://www.endpointpolicymanager.com/support-sharing/licensing-faq.html). + +::: diff --git a/docs/endpointpolicymanager/gettingstarted/cloudmanual/_category_.json b/docs/endpointpolicymanager/gettingstarted/cloudmanual/_category_.json new file mode 100644 index 0000000000..9d8f85b071 --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/cloudmanual/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Endpoint Policy Manager Cloud Quick Start", + "position": 40, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/gettingstarted/cloudmanual/concepts/_category_.json b/docs/endpointpolicymanager/gettingstarted/cloudmanual/concepts/_category_.json new file mode 100644 index 0000000000..f50d2e6366 --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/cloudmanual/concepts/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Concepts, Logons, and Downloads", + "position": 30, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "concepts" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/concepts/concepts.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/concepts/concepts.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/concepts/concepts.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/concepts/concepts.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/concepts/downloads.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/concepts/downloads.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/concepts/downloads.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/concepts/downloads.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/concepts/logons.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/concepts/logons.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/concepts/logons.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/concepts/logons.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/concepts/testlab.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/concepts/testlab.md similarity index 82% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/concepts/testlab.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/concepts/testlab.md index 5ae272198b..b2f79cc970 100644 --- a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/concepts/testlab.md +++ b/docs/endpointpolicymanager/gettingstarted/cloudmanual/concepts/testlab.md @@ -13,13 +13,13 @@ the other editors. To get yourself set up perfectly with a small on-prem test la the steps in the following videos: - Endpoint Policy Manager Cloud: What You Need to Get Started: - [Endpoint Policy Manager Cloud: What you need to get Started](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/testlabbestpractices/start.md) + [Endpoint Policy Manager Cloud: What you need to get Started](/docs/endpointpolicymanager/deliverymethods/cloud/videos/testlabbestpractices/start.md) - How to Create a DC for Editing Purposes: - [How to create a DC for editing purposes](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/testlabbestpractices/createdc.md). + [How to create a DC for editing purposes](/docs/endpointpolicymanager/deliverymethods/cloud/videos/testlabbestpractices/createdc.md). - Testing and Troubleshooting by Renaming an Endpoint Computer: - [Testing and Troubleshooting By Renaming an endpoint Computer](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/testlabbestpractices/renameendpoint.md) + [Testing and Troubleshooting By Renaming an endpoint Computer](/docs/endpointpolicymanager/deliverymethods/cloud/videos/testlabbestpractices/renameendpoint.md) - Endpoint Policy Manager Cloud: On-Prem Test Lab: Tying it all Together: - [Endpoint Policy Manager Cloud: On-Prem Test Lab (tying it all together)](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/testlabbestpractices/onpremise.md) + [Endpoint Policy Manager Cloud: On-Prem Test Lab (tying it all together)](/docs/endpointpolicymanager/deliverymethods/cloud/videos/testlabbestpractices/onpremise.md) By the time you have completed the videos, you will have a mini, free-to-use on-prem test lab with the ability to create and edit all Endpoint Policy Manager directives and test out that they are diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/gettingstarted.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/gettingstarted.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/gettingstarted.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/gettingstarted.md diff --git a/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/_category_.json b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/_category_.json new file mode 100644 index 0000000000..770b2a84f6 --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Web Interface and Controls", + "position": 50, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/billing.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/billing.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/billing.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/billing.md diff --git a/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/_category_.json b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/_category_.json new file mode 100644 index 0000000000..43a3c8c121 --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Company Details", + "position": 50, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/addcompanyadmin.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/addcompanyadmin.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/addcompanyadmin.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/addcompanyadmin.md diff --git a/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/companyadministrator/_category_.json b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/companyadministrator/_category_.json new file mode 100644 index 0000000000..c2645b14fd --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/companyadministrator/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Company Administrators", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/companyadministrator/generalinfo/_category_.json b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/companyadministrator/generalinfo/_category_.json new file mode 100644 index 0000000000..9c2d747221 --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/companyadministrator/generalinfo/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "General Info", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/companyadministrator/generalinfo/changeemail.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/companyadministrator/generalinfo/changeemail.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/companyadministrator/generalinfo/changeemail.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/companyadministrator/generalinfo/changeemail.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/companyadministrator/generalinfo/loginrestrictionseditor.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/companyadministrator/generalinfo/loginrestrictionseditor.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/companyadministrator/generalinfo/loginrestrictionseditor.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/companyadministrator/generalinfo/loginrestrictionseditor.md diff --git a/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/companyadministrator/generalinfo/notificationeditor.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/companyadministrator/generalinfo/notificationeditor.md new file mode 100644 index 0000000000..fc998a84b2 --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/companyadministrator/generalinfo/notificationeditor.md @@ -0,0 +1,10 @@ +--- +title: "Notification Editor" +description: "Notification Editor" +sidebar_position: 40 +--- + +# Notification Editor + +See the topic [Edit Notification Configuration](/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/editnotificationconfiguration.md) for details +on this operation. diff --git a/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/companyadministrator/generalinfo/overview.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/companyadministrator/generalinfo/overview.md new file mode 100644 index 0000000000..30c1344dbf --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/companyadministrator/generalinfo/overview.md @@ -0,0 +1,19 @@ +--- +title: "General Info" +description: "General Info" +sidebar_position: 10 +--- + +# General Info + +On the **General Info** tab, you have a few actions to select from. + +![web_interface_and_controls_75_624x208](/images/endpointpolicymanager/cloud/interface/companydetails/companyadministrators/generalinfo/web_interface_and_controls_75_624x208.webp) + +The actions you can take are listed below and explained in the following sections: + +- [Change Email](/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/companyadministrator/generalinfo/changeemail.md) +- Change Password (No further information needed, therefore not addressed in the sections below.) +- [Resend Welcome Letter](/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/companyadministrator/generalinfo/resendwelcomeletter.md) +- [Login Restrictions Editor](/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/companyadministrator/generalinfo/loginrestrictionseditor.md) +- [N](/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/editnotificationconfiguration.md)[Notification Editor](/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/companyadministrator/generalinfo/notificationeditor.md)ditor diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/companyadministrator/generalinfo/resendwelcomeletter.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/companyadministrator/generalinfo/resendwelcomeletter.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/companyadministrator/generalinfo/resendwelcomeletter.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/companyadministrator/generalinfo/resendwelcomeletter.md diff --git a/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/companyadministrator/overview.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/companyadministrator/overview.md new file mode 100644 index 0000000000..94f7289cdb --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/companyadministrator/overview.md @@ -0,0 +1,22 @@ +--- +title: "Company Administrators" +description: "Company Administrators" +sidebar_position: 20 +--- + +# Company Administrators + +For an overview of security features, including roles, watch this video: +[Endpoint Policy Manager Cloud: Immutable Log](/docs/endpointpolicymanager/deliverymethods/cloud/videos/security/immutablelog.md). + +Your company may have one or more administrators who share access. Those admins may have the same +roles, or different roles that enable different interactions with Endpoint Policy Manager Cloud. Any +specific admin's properties and roles can be accessed via the **Edit** button next to their name. + +![web_interface_and_controls_74_624x169](/images/endpointpolicymanager/cloud/interface/companydetails/companyadministrators/web_interface_and_controls_74_624x169.webp) + +In this window, you can specify the following: + +- General information +- Two-factor options +- Role management diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/companyadministrator/rolemanagement.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/companyadministrator/rolemanagement.md similarity index 85% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/companyadministrator/rolemanagement.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/companyadministrator/rolemanagement.md index c6fb14ce5d..6a2ec55833 100644 --- a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/companyadministrator/rolemanagement.md +++ b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/companyadministrator/rolemanagement.md @@ -15,11 +15,11 @@ The following roles are available: - Authentication Options Admin: An admin with this role can specify which admins can have which 2FA options. Additionally, they may also set customer-level portal policies as described in the - [Edit Customer-Level Portal Policies](/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/editcustomerlevelportalpolicies.md) section. + [Edit Customer-Level Portal Policies](/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/editcustomerlevelportalpolicies.md) section. Specifically, they can force email-based or application-based 2FA for all admins. They can also set the 2FA one-time password lifetime, as well as the automatic log off on idle time. - Notification & Logging Options Admin: An admin with this role can use the **Notifications Editor** For more information, see the - [Edit Notification Configuration](/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/editnotificationconfiguration.md) section). + [Edit Notification Configuration](/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/editnotificationconfiguration.md) section). - Customer Admin Manager: An admin with this role can approve newly created admins when other admins initiate the request. diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/companyadministrator/twofactoroptions.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/companyadministrator/twofactoroptions.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/companyadministrator/twofactoroptions.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/companyadministrator/twofactoroptions.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/configureentraidaccess.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/configureentraidaccess.md similarity index 94% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/configureentraidaccess.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/configureentraidaccess.md index e48a613676..e9357b7c12 100644 --- a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/configureentraidaccess.md +++ b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/configureentraidaccess.md @@ -7,7 +7,7 @@ sidebar_position: 100 # Configure Azure AD Access For an overview of this section, please watch the following video: -[Endpoint Policy Manager Cloud + Azure AD: Better Together for Computer ILT and Computer Policy Targeting](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/tipsandtricks/entraid.md). +[Endpoint Policy Manager Cloud + Azure AD: Better Together for Computer ILT and Computer Policy Targeting](/docs/endpointpolicymanager/deliverymethods/cloud/videos/tipsandtricks/entraid.md). You can link your Endpoint Policy Manager Cloud to one or more Azure AD tenants. When you do this, you will be able to enumerate user membership within Item-Level Targeting. To begin, enter a diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/customerlog.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/customerlog.md similarity index 90% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/customerlog.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/customerlog.md index 9f514421db..e845134fc2 100644 --- a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/customerlog.md +++ b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/customerlog.md @@ -7,7 +7,7 @@ sidebar_position: 70 # Customer Log For an overview of this section, see this video: -[Endpoint Policy Manager Cloud: Immutable Log](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/security/immutablelog.md). +[Endpoint Policy Manager Cloud: Immutable Log](/docs/endpointpolicymanager/deliverymethods/cloud/videos/security/immutablelog.md). The customer log, also known as the immutable log, is a very powerful security feature within Endpoint Policy Manager Cloud. @@ -27,7 +27,7 @@ Manager Cloud instance. :::note You can also push your immutable log to your on-prem SIEM (log management) system via an automated email push. To set this up, watch the following video: -[Endpoint Policy Manager Cloud Logs and Automatically Pushing via Email](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/security/emaillogs.md). +[Endpoint Policy Manager Cloud Logs and Automatically Pushing via Email](/docs/endpointpolicymanager/deliverymethods/cloud/videos/security/emaillogs.md). ::: diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/downloads.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/downloads.md similarity index 90% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/downloads.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/downloads.md index 58e3b58f3b..f1ada11ac0 100644 --- a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/downloads.md +++ b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/downloads.md @@ -18,7 +18,7 @@ you would download the 32-bit or 64-bit versions, or both as a bundled ZIP. Clients will continue to use the Endpoint Policy Manager Cloud client version they started with until you specifically tell them to use a later version. Please watchthe following videoto see how to use groups to keep clients updated: -[Endpoint Policy Manager Cloud Groups CSE and Cloud Client Small-Scale Testing and Updates](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/groups.md). +[Endpoint Policy Manager Cloud Groups CSE and Cloud Client Small-Scale Testing and Updates](/docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/groups.md). ::: diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/editcustomerlevelportalpolicies.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/editcustomerlevelportalpolicies.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/editcustomerlevelportalpolicies.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/editcustomerlevelportalpolicies.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/editnotificationconfiguration.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/editnotificationconfiguration.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/editnotificationconfiguration.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/editnotificationconfiguration.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/exportcompanycertificatepfx.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/exportcompanycertificatepfx.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/exportcompanycertificatepfx.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/exportcompanycertificatepfx.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/loginrestrictions.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/loginrestrictions.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/loginrestrictions.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/loginrestrictions.md diff --git a/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/overview.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/overview.md new file mode 100644 index 0000000000..2f482e89b7 --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/overview.md @@ -0,0 +1,80 @@ +--- +title: "Company Details" +description: "Company Details" +sidebar_position: 50 +--- + +# Company Details + +The **Company Details** tab has several sections. Some sections involve settings related to the look +and feel of things, but many others are security related. + +For an overview of the major Endpoint Policy Manager Cloud security features (2FA, admin roles, +notifications, IP block restrictions, etc.) check out this video: +[Endpoint Policy Manager Cloud: Security Features](/docs/endpointpolicymanager/deliverymethods/cloud/videos/security/features.md). + +![web_interface_and_controls_70_624x296](/images/endpointpolicymanager/cloud/interface/companydetails/web_interface_and_controls_70_624x296.webp) + +In the sections that follow,we cover the following items: + +- Company Details: name, time zone, and computer registration mode +- Login restrictions: external IPs that are allowed to connect to Endpoint Policy Manager Cloud +- Company administrators: admins who can participate in your instance of Endpoint Policy Manager + Cloud and their roles +- Downloads: additional information on downloads that was not covered in the Quickstart + +Additionally, we'll explore the actions available to us in the **Company Details** tab: + +- Add company admin +- Revoke company's certificate +- Edit notification configuration +- Customer log +- Edit customer-level portal policies +- User Requests +- Export company certificate as .PFX +- Configure Azure AD Access + +## Company Details Section + +Video: For an overview of this section, see this video: +[Endpoint Policy Manager Cloud: Strict vs. Loose Computer Registration Mode](/docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/registrationmode.md). + +The **Company Details** section under the **Company Details** tab allows you to change your company +display name and time zone, which is used for reporting on log files. However, the most important +setting in this section is the **Computer registration mode**, which has four options. + +![web_interface_and_controls_71_624x518](/images/endpointpolicymanager/troubleshooting/cloud/underhood/web_interface_and_controls_71_624x518.webp) + +This setting directs Endpoint Policy Manager Cloud on how to act when an endpoint computer is +already joined to Endpoint Policy Manager Cloud and attempts to re-register or claim another +license. This can occur when the client machine is wiped and reloaded with another operating system, +or when the Endpoint Policy Manager Cloud client is unloaded and then re-loaded. + +Here is how the four modes operate: + +- **Strict (always register a new computer)**- Even if Endpoint Policy Manager Cloud has seen the + hardware UUID or MAC address of the client machine before, it will always create a new secure + certificate connection, and treat the computer as if it has never been seen before. The computer + then loses any existing group membership and is always (only) assigned back to the built-in + **Unassigned** and **All** groups. +- **Loose (allow computers to recovery access by UUID)**- If a computer account already exists (and + matches by hardware UUID only) then use that existing account. If a computer is already a member + of company groups, that membership is maintained. +- **Loose (allow computers to recovery access by UUID or MAC Address)**- If a computer account + already exists (and matches by hardware UUID only, or MAC address) then use that existing account. + If a computer is already a member of company groups, that membership is maintained. +- **Advanced (always register a new computer and keep existing records)**- If a computer account + already exists (and matches by hardware UUID or MAC address) then create a new record in Endpoint + Policy Manager Cloud just as you would do in strict mode. The difference is that the record for + the previous computer is not deleted. Thus multiple computers with the same hardware can be + registered, each with their own unique record in Endpoint Policy Manager Cloud. This scenario is + useful for VDI, where the machines act identical, but you need to register each one in a new way. + +The default behavior is strict mode because it is the most secure. + +:::note +Even in loose mode, Endpoint Policy Manager Cloud still verifies the client using the x509 +certificate embedded into the MSI. Therefore, guessing the UUID or MAC address is not enough for an +unrelated person to join your Endpoint Policy Manager Cloud. + +::: diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/revokecompanycertificate.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/revokecompanycertificate.md similarity index 90% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/revokecompanycertificate.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/revokecompanycertificate.md index fa1469731c..6cdf75778d 100644 --- a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/revokecompanycertificate.md +++ b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/revokecompanycertificate.md @@ -7,7 +7,7 @@ sidebar_position: 50 # Revoke Company's Certificate Endpoint machines join Endpoint Policy Manager Cloud via the Cloud client MSI download (see the -[Downloads](/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/downloads.md) section ). Inside the Cloud client MSI (for each company) is a unique x509 +[Downloads](/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/companydetails/downloads.md) section ). Inside the Cloud client MSI (for each company) is a unique x509 certificate. This identifies your MSI among all other Endpoint Policy Manager customers. This way, only your Endpoint Policy Manager Cloud client MSI can be used to join computers to your Endpoint Policy Manager Cloud account. If your MSI is lost, you see unexpected machines in your Endpoint diff --git a/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/computergroups/_category_.json b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/computergroups/_category_.json new file mode 100644 index 0000000000..b9d23faf01 --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/computergroups/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Computer Groups", + "position": 40, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/computergroups/overview.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/computergroups/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/computergroups/overview.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/computergroups/overview.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/computergroups/workingwith.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/computergroups/workingwith.md similarity index 99% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/computergroups/workingwith.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/computergroups/workingwith.md index f8ace34485..53663771a4 100644 --- a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/computergroups/workingwith.md +++ b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/computergroups/workingwith.md @@ -86,7 +86,7 @@ to the **All** group, they are always enforced. ## Company Groups Video: For an overview of this section, watch -[Endpoint Policy Manager Cloud Groups CSE and Cloud Client Small-Scale Testing and Updates](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/groups.md). +[Endpoint Policy Manager Cloud Groups CSE and Cloud Client Small-Scale Testing and Updates](/docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/groups.md). The Endpoint Policy Manager CSE and the Endpoint Policy Manager Cloud client get updated from time to time for bug fixes as well as for features. For instance, whenever a new component is released, a diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/filebox.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/filebox.md similarity index 93% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/filebox.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/filebox.md index 65cc7736ec..94974717ca 100644 --- a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/filebox.md +++ b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/filebox.md @@ -19,10 +19,10 @@ The **File Box** tab provides access to two features: Video: You can learn more about external links and Endpoint Policy Manager Remote Work Delivery Manager from this video: -[Deploy software with Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/methods/cloud.md). +[Deploy software with Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/methods/cloud.md). You can learn more about the external links function in -[How to use Remote Work Delivery Manager to apply Firewall policies](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/remoteworkdeliverymanager.md). +[How to use Remote Work Delivery Manager to apply Firewall policies](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/remoteworkdeliverymanager.md). But in short, you can use public web services, like Amazon S3, to house software and then deploy it to your remote PCs. However, Endpoint Policy Manager Cloud needs to know about this link before it can be used. For this reason, you need to select the **Add external link** action and then specify @@ -36,7 +36,7 @@ Manager. ## ADMX Files Video: You can see an overview of this section in the video: -[Endpoint Policy ManagerCloud: Upload and use your own ADMX files to Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/admxfiles.md). +[Endpoint Policy ManagerCloud: Upload and use your own ADMX files to Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/admxfiles.md). While Endpoint Policy Manager (the company) automatically keeps many important ADMX settings automatically updated for you, there could be a time when you have a third-party or custom diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/licensestatus.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/licensestatus.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/licensestatus.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/licensestatus.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/overview.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/overview.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/overview.md diff --git a/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/reports.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/reports.md new file mode 100644 index 0000000000..20d72172ff --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/reports.md @@ -0,0 +1,65 @@ +--- +title: "Reports" +description: "Reports" +sidebar_position: 70 +--- + +# Reports + +There are two reports under the **Reports** tab: **Computers (Status)** and **Policy Reports (XML +Delivery)**. These reports are discussed in the following sections. + +## Computers (Status) Report + +The **Computers (Status) Report** has several sub-reports, where you can focus in on computers with +a specific status, as shown below. This report shows a table of results with data on computers +currently connected to Endpoint Policy Manager Cloud. The following data is available: computer +name, installed OS, IP address, and computer status for Cloud. + +![web_interface_and_controls_112_624x332](/images/endpointpolicymanager/cloud/interface/web_interface_and_controls_112_624x332.webp) + +The status selector on the upper left of the table allows you to filter the results. + +Currently you can sort by thefollowin g criteria: **Acquired** (active), **Waiting List**, +**Revoked**, and **Revoked by Endpoint Policy Manager Software**. The table can be exported and +saved in MS Excel or Word format by clicking the **Save** button and selecting Excel or Word. + +![web_interface_and_controls_114_624x196](/images/endpointpolicymanager/cloud/interface/web_interface_and_controls_114_624x196.webp) + +## Policy Reports (XML Delivery) Report + +Video: For an overview of this section, check out this video: +[Endpoint Policy Manager Cloud Reporting Demo](/docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/reports.md) + +Policy Reports (XML Delivery) Report is a very powerful feature. This report enables you to know +which computers received which XML files. To see this report, select **Add Report**, then pick a +computer group. + +![web_interface_and_controls_115_624x355](/images/endpointpolicymanager/cloud/interface/web_interface_and_controls_115_624x355.webp) + +Next, select the scope you would like to examine. The recommended selection is **Select all XML data +files linked to this folder and all parent folders (recommended)**. + +![web_interface_and_controls_116_468x353](/images/endpointpolicymanager/cloud/interface/web_interface_and_controls_116_468x353.webp) + +You could also select the option **Select all XML data files linked ONLY to this folder**, which +could select fewer XML data files. + +![web_interface_and_controls_117_468x354](/images/endpointpolicymanager/cloud/interface/web_interface_and_controls_117_468x354.webp) + +You can also select **Manually select XML data files from XML repository** and specify specific XML +files to test for. + +Once you have created your report, it is saved for future use but not yet run. When you run your +report, it will have the following organization: + +- All the computers in the group are shown in the first column. +- All the XML files are in all other columns. + +The intersection between computer and XML file demonstrates the date and time the computer got the +most recent XML file (in green), the date and time the computer got an old version of the XML file +(in yellow), and if the XML file was not received at all (in red). + +![web_interface_and_controls_118_499x373](/images/endpointpolicymanager/cloud/interface/web_interface_and_controls_118_499x373.webp) + +This allows you to precisely knows which XML policy files were embraced by what machine and when. diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/tools.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/tools.md similarity index 92% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/tools.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/tools.md index 9cf7bc52e4..acdd561a47 100644 --- a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/tools.md +++ b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/tools.md @@ -7,12 +7,12 @@ sidebar_position: 60 # Tools Video: For an overview of this section, see -[Endpoint Policy Manager Cloud: Automatically Join Groups with JOINTOKEN](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/jointoken.md). +[Endpoint Policy Manager Cloud: Automatically Join Groups with JOINTOKEN](/docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/jointoken.md). Video: For an advanced installation routine where you can use another tool like an MDM tool, such as Intune, or an RMM tool to bootstrap the installation of the Endpoint Policy Manager Cloud client and also immediately join the computer to specific groups, see -[Endpoint Policy Manager Cloud + MDM Services: Install Cloud Client + automatically join PPC Groups and get policy.](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/usingwithothermethods/mdm.md). +[Endpoint Policy Manager Cloud + MDM Services: Install Cloud Client + automatically join PPC Groups and get policy.](/docs/endpointpolicymanager/deliverymethods/cloud/videos/usingwithothermethods/mdm.md). The Tools tab has a special tool called **Join Tokens**. The **Join Tokens** function enables you to create a unique string to append at the end of the Cloud client installation file. When you do, the diff --git a/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/xmldatafiles/_category_.json b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/xmldatafiles/_category_.json new file mode 100644 index 0000000000..c712a2d39c --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/xmldatafiles/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "XML Data Files", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/xmldatafiles/createpolicy.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/xmldatafiles/createpolicy.md similarity index 82% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/xmldatafiles/createpolicy.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/xmldatafiles/createpolicy.md index 748888e09c..4fe07d1d88 100644 --- a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/xmldatafiles/createpolicy.md +++ b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/xmldatafiles/createpolicy.md @@ -17,7 +17,7 @@ it to any groups. For the items which do not have in-cloud editors, you must use the steps described in the -**[Upload XML Data File](/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/xmldatafiles/upload.md)** section. In this case, you must create the policy on-prem +**[Upload XML Data File](/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/xmldatafiles/upload.md)** section. In this case, you must create the policy on-prem first, then export and upload it manually. ![web_interface_and_controls_18_625x627](/images/endpointpolicymanager/cloud/interface/xmldatafiles/web_interface_and_controls_18_625x627.webp) @@ -38,7 +38,7 @@ Endpoint Policy Manager, and Windows 10. Endpoint Policy Manager keeps these up Video: To see how to use in-cloud ADMX settings maintained by Endpoint Policy Manager, watch this video: -[Endpoint Policy ManagerCloud: Use in-cloud ADMX settings maintained by Endpoint Policy Manager for Windows, Office, Chrome and more](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/admxsettings.md). +[Endpoint Policy ManagerCloud: Use in-cloud ADMX settings maintained by Endpoint Policy Manager for Windows, Office, Chrome and more](/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/admxsettings.md). However, you may also upload your own ADMX templates for your own applications. To learn how to do that, see the "File Box" section later in this guide. @@ -54,12 +54,12 @@ Next, specify the state and any other available options. Additionally, to learn how to use the in-cloud Microsoft Security Settings editors, we recommend this video: -[Endpoint Policy Manager Cloud and Security Settings (More examples)](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/securitysettings.md). +[Endpoint Policy Manager Cloud and Security Settings (More examples)](/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/securitysettings.md). One sub-editor type for Microsoft Security Settings is the Restricted Groups Editor. You can learn how to use this editor in this video: -[Endpoint Policy Manager Cloud: Restricted Groups Editor](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/tipsandtricks/restricted_groups_editor.md). +[Endpoint Policy Manager Cloud: Restricted Groups Editor](/docs/endpointpolicymanager/deliverymethods/cloud/videos/tipsandtricks/restricted_groups_editor.md). To learn how to use the in-cloud Microsoft Group Policy Preferences editors, we recommend this video: -[Endpoint Policy Manager Cloud + GPPrefs (More examples)](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/preferences.md). +[Endpoint Policy Manager Cloud + GPPrefs (More examples)](/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/preferences.md). diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/xmldatafiles/createpolicytemplate.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/xmldatafiles/createpolicytemplate.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/xmldatafiles/createpolicytemplate.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/xmldatafiles/createpolicytemplate.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/xmldatafiles/delete.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/xmldatafiles/delete.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/xmldatafiles/delete.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/xmldatafiles/delete.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/xmldatafiles/download.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/xmldatafiles/download.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/xmldatafiles/download.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/xmldatafiles/download.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/xmldatafiles/duplicate.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/xmldatafiles/duplicate.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/xmldatafiles/duplicate.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/xmldatafiles/duplicate.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/xmldatafiles/importpolicies.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/xmldatafiles/importpolicies.md similarity index 97% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/xmldatafiles/importpolicies.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/xmldatafiles/importpolicies.md index 931e8bae94..55a56404f6 100644 --- a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/xmldatafiles/importpolicies.md +++ b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/xmldatafiles/importpolicies.md @@ -7,7 +7,7 @@ sidebar_position: 100 # Import Policies from GPO Backup Video: For a video overview on this section, see: -[How to import GPOs to Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/import.md). +[How to import GPOs to Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/import.md). You might have the need to take existing on-prem Group Policy Objects (GPOs) and import their contents into Endpoint Policy Manager Cloud. With the **Import Policies from GPO Backup** action, diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/xmldatafiles/itemleveltargetingcollections.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/xmldatafiles/itemleveltargetingcollections.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/xmldatafiles/itemleveltargetingcollections.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/xmldatafiles/itemleveltargetingcollections.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/xmldatafiles/modify.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/xmldatafiles/modify.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/xmldatafiles/modify.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/xmldatafiles/modify.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/xmldatafiles/overview.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/xmldatafiles/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/xmldatafiles/overview.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/xmldatafiles/overview.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/xmldatafiles/showreport.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/xmldatafiles/showreport.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/xmldatafiles/showreport.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/xmldatafiles/showreport.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/xmldatafiles/upload.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/xmldatafiles/upload.md similarity index 85% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/xmldatafiles/upload.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/xmldatafiles/upload.md index 13a6fc86eb..b47fef051d 100644 --- a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/xmldatafiles/upload.md +++ b/docs/endpointpolicymanager/gettingstarted/cloudmanual/interface/xmldatafiles/upload.md @@ -7,7 +7,7 @@ sidebar_position: 60 # Upload XML Data File Video: For an overview of this section, see the following video: -[Endpoint Policy Manager Cloud: General Tips about On-Prem to PP Cloud Export](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/onpremiseexport.md). +[Endpoint Policy Manager Cloud: General Tips about On-Prem to PP Cloud Export](/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/onpremiseexport.md). You can use the **Upload XML Data File** action to create XML data files when you have used an on-prem MMC editor, have exported the policy, and are ready to use the policy in Endpoint Policy @@ -30,11 +30,11 @@ Endpoint Policy Manager Cloud. Video: We recommend you watch the following video to understand how to export all the various Microsoft Group Policy settings for import into Endpoint Policy Manager Cloud: -[Endpoint Policy ManagerCloud: How to deploy Microsoft Group Policy Settings using Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/grouppolicysettings.md). +[Endpoint Policy ManagerCloud: How to deploy Microsoft Group Policy Settings using Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/grouppolicysettings.md). Video: We recommend you watch the following video to understand how to export Endpoint Policy Manager settings to Endpoint Policy Manager Cloud: -[Endpoint Policy ManagerCloud: How to deploy Endpoint Policy Manager specific settings (using in-cloud editors and exporting from on-prem)](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/endpointpolicymanagersettings.md). +[Endpoint Policy ManagerCloud: How to deploy Endpoint Policy Manager specific settings (using in-cloud editors and exporting from on-prem)](/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/endpointpolicymanagersettings.md). :::tip Remember, after XML data files are uploaded, they do not automatically enforce any settings on diff --git a/docs/endpointpolicymanager/gettingstarted/cloudmanual/licensing/_category_.json b/docs/endpointpolicymanager/gettingstarted/cloudmanual/licensing/_category_.json new file mode 100644 index 0000000000..fea603bcc1 --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/cloudmanual/licensing/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Licensing with Endpoint Policy Manager Cloud Components", + "position": 60, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/licensing/computeraccountdeletion.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/licensing/computeraccountdeletion.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/licensing/computeraccountdeletion.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/licensing/computeraccountdeletion.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/licensing/licensemanagement.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/licensing/licensemanagement.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/licensing/licensemanagement.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/licensing/licensemanagement.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/licensing/otherpolicydeliverymechanisms.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/licensing/otherpolicydeliverymechanisms.md similarity index 94% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/licensing/otherpolicydeliverymechanisms.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/licensing/otherpolicydeliverymechanisms.md index 830cfdbe0b..43115f2772 100644 --- a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/licensing/otherpolicydeliverymechanisms.md +++ b/docs/endpointpolicymanager/gettingstarted/cloudmanual/licensing/otherpolicydeliverymechanisms.md @@ -14,7 +14,7 @@ your purchase. also receive Endpoint Policy Manager directives via GPOs as well, without needing an explicit Endpoint Policy Manager on-premise license. A description of this scenario can be found at the following link: - [Endpoint Policy ManagerCloud and Endpoint Policy Manager OnPremise – Together using PPCloud Licenses](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/usingwithothermethods/onpremise.md). + [Endpoint Policy ManagerCloud and Endpoint Policy Manager OnPremise – Together using PPCloud Licenses](/docs/endpointpolicymanager/deliverymethods/cloud/videos/usingwithothermethods/onpremise.md). - For Endpoint Policy Manager Enterprise and Endpoint Policy Manager Professional Editions, when a computer acquires a Endpoint Policy Manager Cloud license, the computer will not process on-prem or MDM directives as well, unless a corresponding license for that method is acquired as part of diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/licensing/overview.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/licensing/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/licensing/overview.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/licensing/overview.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/licensing/reconnectionperiod.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/licensing/reconnectionperiod.md similarity index 94% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/licensing/reconnectionperiod.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/licensing/reconnectionperiod.md index 897ace8fcd..dfd5bac594 100644 --- a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/licensing/reconnectionperiod.md +++ b/docs/endpointpolicymanager/gettingstarted/cloudmanual/licensing/reconnectionperiod.md @@ -11,7 +11,7 @@ period within which all customers must re-connect with Endpoint Policy Manager C which enables them to keep using the service and get new policies. A computer that is offline for more than 14 days will transition to a state of being unlicensed. To see what happens when a computer becomes unlicensed (per component), see this KB article: -[What happens to each component when Endpoint Policy Manager gets unlicensed or the GPO or policy no longer applies?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/components_2.md). +[What happens to each component when Endpoint Policy Manager gets unlicensed or the GPO or policy no longer applies?](/docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/components_2.md). However, as soon as the computer re-connects to Endpoint Policy Manager Cloud and claims an available license, the computer picks up right where it left off. Having a computer return a license diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/licensing/serversessionvirtualization.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/licensing/serversessionvirtualization.md similarity index 96% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/licensing/serversessionvirtualization.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/licensing/serversessionvirtualization.md index d23baae12f..a7dc5f4db5 100644 --- a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/licensing/serversessionvirtualization.md +++ b/docs/endpointpolicymanager/gettingstarted/cloudmanual/licensing/serversessionvirtualization.md @@ -17,7 +17,7 @@ your purchase. server, instead of handling actual usage to the maximum extent of the server. If you need to do this, you must also have a corresponding Endpoint Policy Manager Group Policy Edition license where the number of sessions is expressly counted. You can read more about this in this KB: - [How do I license my Citrix, RDS, WVD, VDI or other multi-session Windows version with Endpoint Policy Manager Cloud ?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/vertualizationcitrix/multisession.md). + [How do I license my Citrix, RDS, WVD, VDI or other multi-session Windows version with Endpoint Policy Manager Cloud ?](/docs/endpointpolicymanager/licensing/knowledgebase/vertualizationcitrix/multisession.md). - For Endpoint Policy Manager Enterprise and Endpoint Policy Manager Professional customers, when a computer acquires a Endpoint Policy Manager Cloud license, the computer will not process on-prem or MDM directives as well, unless a corresponding license for that method is acquired as part of diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/licensing/vdi.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/licensing/vdi.md similarity index 90% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/licensing/vdi.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/licensing/vdi.md index ae90b8ed58..f5401d9b4a 100644 --- a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/licensing/vdi.md +++ b/docs/endpointpolicymanager/gettingstarted/cloudmanual/licensing/vdi.md @@ -30,6 +30,6 @@ Use the following KB articles for tips to install Endpoint Policy Manager Cloud scenarios: - Endpoint Policy Manager Cloud and Windows Virtual Desktop: - [How to install the Endpoint Policy Manager Cloud Client for use in an Azure Virtual Desktop image](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/azurevirutaldesktop.md). + [How to install the Endpoint Policy Manager Cloud Client for use in an Azure Virtual Desktop image](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/azurevirutaldesktop.md). - Endpoint Policy Manager Cloud and VMware Horizon: - [How to install and configure the PPC Client for a Non-Persistent VDI Image in VMware Horizon](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/vdisolutions.md). + [How to install and configure the PPC Client for a Non-Persistent VDI Image in VMware Horizon](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/vdisolutions.md). diff --git a/docs/endpointpolicymanager/gettingstarted/cloudmanual/overview.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/overview.md new file mode 100644 index 0000000000..3a13255432 --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/cloudmanual/overview.md @@ -0,0 +1,31 @@ +--- +title: "Endpoint Policy Manager Cloud Quick Start" +description: "Endpoint Policy Manager Cloud Quick Start" +sidebar_position: 40 +--- + +# Endpoint Policy Manager Cloud Quick Start + +Netwrix Endpoint Policy Manager (formerly PolicyPak) Cloud is our system for delivering and +enforcing Microsoft Group Policy and all Endpoint Policy Manager special settings to +non-domain-joined, domain-joined on-prem, or remote machines. Endpoint Policy Manager Cloud enables +machines to stay protected, regardless of where they are. It is comprised of separate components to +enable you to control different types of settings. If you are in a hurry to get started, you can +start with a web browser and one Windows 10 machine and see Endpoint Policy Manager immediately in +action. + +Here's the fastest way to get started: + +**Step 1 –** Check out our **Two minute introduction** video then our Quickstart video here: Getting +Started with Cloud > [Video Learning Center](/docs/endpointpolicymanager/deliverymethods/cloud/videos/videolearningcenter.md). Work through the +videos one-by-one to try out all the main features. + +**Step 2 –** Additionally, we strongly recommend you have a mini on-prem test lab for editing and +testing purposes. You should work through each of the videos on the Test Lab Best Practices page and +make sure you have your free-to-use test lab working: Getting Started with Cloud > +[Video Learning Center](/docs/endpointpolicymanager/deliverymethods/cloud/videos/videolearningcenter.md). + +**Step 3 –** Use the rest of the manual to understand the finer points of Endpoint Policy Manager +Cloud including some key security settings. + +Enjoy Endpoint Policy Manager Cloud! diff --git a/docs/endpointpolicymanager/gettingstarted/cloudmanual/quickstart/_category_.json b/docs/endpointpolicymanager/gettingstarted/cloudmanual/quickstart/_category_.json new file mode 100644 index 0000000000..aae812d125 --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/cloudmanual/quickstart/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Setup, Download, Install, and Verify", + "position": 40, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "quickstart" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/quickstart/quickstart.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/quickstart/quickstart.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/quickstart/quickstart.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/quickstart/quickstart.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/quickstart/verify.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/quickstart/verify.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/quickstart/verify.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/quickstart/verify.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/security.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/security.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/security.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/security.md diff --git a/docs/endpointpolicymanager/gettingstarted/cloudmanual/underhood/_category_.json b/docs/endpointpolicymanager/gettingstarted/cloudmanual/underhood/_category_.json new file mode 100644 index 0000000000..9f9312f8e2 --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/cloudmanual/underhood/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Underneath the Hood and Troubleshooting", + "position": 70, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/underhood/clientcommands.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/underhood/clientcommands.md similarity index 89% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/underhood/clientcommands.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/underhood/clientcommands.md index ccfa7262e3..f8e6c0f33e 100644 --- a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/underhood/clientcommands.md +++ b/docs/endpointpolicymanager/gettingstarted/cloudmanual/underhood/clientcommands.md @@ -21,9 +21,9 @@ The Endpoint Policy Manager Cloud client can be invoked from an elevated command within groups. - `/sysprep`: Used to install the Endpoint Policy Manager Cloud client on a virtual desktop image. See "Option 2" in this KB article: - [How to install the Endpoint Policy Manager Cloud Client for use in an Azure Virtual Desktop image](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/azurevirutaldesktop.md). + [How to install the Endpoint Policy Manager Cloud Client for use in an Azure Virtual Desktop image](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/azurevirutaldesktop.md). Or see this article: - [How to install and configure the PPC Client for a Non-Persistent VDI Image in VMware Horizon](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/vdisolutions.md). + [How to install and configure the PPC Client for a Non-Persistent VDI Image in VMware Horizon](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/vdisolutions.md). - `/unregister`: Used to un-register a machine from Endpoint Policy Manager Cloud and reclaim a license. Used with a virtual desktops scenario. - `/jointoken:value`: Used in conjunction with the `/sysprep `switch to automatically join a diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/underhood/installation.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/underhood/installation.md similarity index 97% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/underhood/installation.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/underhood/installation.md index 8f55cb9d84..a7a4daf33d 100644 --- a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/underhood/installation.md +++ b/docs/endpointpolicymanager/gettingstarted/cloudmanual/underhood/installation.md @@ -16,7 +16,7 @@ Figure 156. The final window of the installation process. There are some common issues that occur during installation, and these client troubleshooting errors are documented in one place: Getting Started with Cloud > -[Knowledge Base](/docs/endpointpolicymanager/knowledgebase/knowledgebase.md). However, three of our most common errors +[Knowledge Base](/docs/endpointpolicymanager/). However, three of our most common errors are presented in the next few pages. ## No Internet Connection During Installation diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/underhood/overview.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/underhood/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/underhood/overview.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/underhood/overview.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/underhood/xmldatastorage.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/underhood/xmldatastorage.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/cloud/underhood/xmldatastorage.md rename to docs/endpointpolicymanager/gettingstarted/cloudmanual/underhood/xmldatastorage.md diff --git a/docs/endpointpolicymanager/gettingstarted/cloudmanual/uninstall.md b/docs/endpointpolicymanager/gettingstarted/cloudmanual/uninstall.md new file mode 100644 index 0000000000..25342e24cc --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/cloudmanual/uninstall.md @@ -0,0 +1,18 @@ +--- +title: "Endpoint Policy Manager Cloud Uninstallation" +description: "Endpoint Policy Manager Cloud Uninstallation" +sidebar_position: 80 +--- + +# Endpoint Policy Manager Cloud Uninstallation + +When the Netwrix Endpoint Policy Manager (formerly PolicyPak) Cloud client is manually uninstalled +(or the computer account is permanently deleted from within Endpoint Policy Manager Cloud), the +following happens: + +- All acquired licenses from Endpoint Policy Manager Cloud are returned to the pool (if the computer + can make contact with Endpoint Policy Manager Cloud). +- All XML data files that are in the Cloud folder are removed. +- Any Endpoint Policy Manager component will become unlicensed. Different licenses have different + behaviors when they become unlicensed. Check the KB article here for more information: + [What happens to each component when Endpoint Policy Manager gets unlicensed or the GPO or policy no longer applies?](/docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/components_2.md). diff --git a/docs/endpointpolicymanager/fastest.md b/docs/endpointpolicymanager/gettingstarted/fastest.md similarity index 89% rename from docs/endpointpolicymanager/fastest.md rename to docs/endpointpolicymanager/gettingstarted/fastest.md index 73d0f20219..e082ff3edb 100644 --- a/docs/endpointpolicymanager/fastest.md +++ b/docs/endpointpolicymanager/gettingstarted/fastest.md @@ -62,35 +62,35 @@ Endpoint Policy Manager has a few Quick start topics to provide specific guidanc Quick tart topics for delivery method of policies you plan to use: -- [Group Policy Delivery Quick Start](/docs/endpointpolicymanager/manuals/introductionandquick/quickstart/grouppolicy.md) -- [MDM / Intune Delivery Quick Start](/docs/endpointpolicymanager/manuals/introductionandquick/quickstart/mdm.md) -- [Endpoint Policy Manager Cloud Delivery Quick Start](/docs/endpointpolicymanager/manuals/introductionandquick/quickstart/cloud.md) +- [Group Policy Delivery Quick Start](/docs/endpointpolicymanager/gettingstarted/quickstart/grouppolicy.md) +- [MDM / Intune Delivery Quick Start](/docs/endpointpolicymanager/gettingstarted/quickstart/mdm.md) +- [Endpoint Policy Manager Cloud Delivery Quick Start](/docs/endpointpolicymanager/gettingstarted/quickstart/cloud.md) A detailed Installation Guide for On-Prem scenarios that takes you from download to verified. -- [Step 1: Get the download and inspect its contents](/docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/downloadcontents.md) +- [Step 1: Get the download and inspect its contents](/docs/endpointpolicymanager/gettingstarted/overviewinstall/downloadcontents.md) A detailed topic is available if you're in a hurry to get started with Endpoint Policy Manager Cloud. -- [Endpoint Policy Manager Cloud Quick Start](/docs/endpointpolicymanager/manuals/introductionandquick/cloud/overview.md) +- [Endpoint Policy Manager Cloud Quick Start](/docs/endpointpolicymanager/gettingstarted/cloudmanual/overview.md) A detailed MDM & UEM tools (like Intune) topic can be found here: -- [MDM & UEM Tools](/docs/endpointpolicymanager/manuals/introductionandquick/mdm/overview.md) +- [MDM & UEM Tools](/docs/endpointpolicymanager/gettingstarted/mdmmanual/overview.md) A detailed PolicyPak Least Privilege Manager Implementation Quickstart Guide that is project oriented to get you to the success line quickly. -[Endpoint Privilege Manager Implementation QuickStart Guide](/docs/endpointpolicymanager/manuals/leastprivilegesecuri/pplpmimplementationguide.md) +[Endpoint Privilege Manager Implementation QuickStart Guide](/docs/endpointpolicymanager/components/endpointprivilegemanager/technotes/implementationguide.md) ## Refer to Documentation in the Netwrix Technical Knowledge Center Endpoint Policy Manager has an extensive library of detailed manuals and Knowledge Base and Videos. Consider bookmarking these important pages: -- [Netwrix Endpoint Policy Manager (formerly PolicyPak) Knowledge Base Articles](/docs/endpointpolicymanager/knowledgebase/knowledgebase.md) -- [Netwrix Endpoint Policy Manager (formerly PolicyPak) User Manuals](/docs/endpointpolicymanager/knowledgebase/knowledgebase.md) +- [Netwrix Endpoint Policy Manager (formerly PolicyPak) Knowledge Base Articles](/docs/endpointpolicymanager/) +- [Netwrix Endpoint Policy Manager (formerly PolicyPak) User Manuals](/docs/endpointpolicymanager/) Finding what youare looking for comes down to Knowledge Base & Videos and User Manuals. Here is a way to get oriented on the navigation. diff --git a/docs/endpointpolicymanager/gettingstarted/mdmmanual/_category_.json b/docs/endpointpolicymanager/gettingstarted/mdmmanual/_category_.json new file mode 100644 index 0000000000..efe5711596 --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/mdmmanual/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "MDM & UEM Tools", + "position": 50, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/gettingstarted/mdmmanual/gettingstarted.md b/docs/endpointpolicymanager/gettingstarted/mdmmanual/gettingstarted.md new file mode 100644 index 0000000000..5c3bde8b98 --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/mdmmanual/gettingstarted.md @@ -0,0 +1,79 @@ +--- +title: "MDM and UEM Tools Quick Start" +description: "MDM and UEM Tools Quick Start" +sidebar_position: 10 +--- + +# MDM and UEM Tools Quick Start + +You might want to use Endpoint Policy Manager along with the following UEM tools: + +- MEMCM (formerly known as SCCM) (video: + [Perform Desktop Lockdown using Microsoft SCCM and Endpoint Policy Manager ](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/methods/sccmsoftwarecenter.md)) +- Microsoft Intune (video: + [Endpoint Policy Manager and Microsoft Intune](/docs/endpointpolicymanager/deliverymethods/mdm/videos/gettingstarted/microsoftintune.md)) +- Symantec Altiris +- Dell KACE +- LabTech +- PDQ Deploy (videos: + [Deploy and Manage Firefox with PDQ Deploy and Endpoint Policy Manager ](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/methods/pdqdeployfirefox.md) + and + [Deploy and Manage WinZip with PDQ Deploy and Endpoint Policy Manager ](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/methods/pdqdeploy.md)) +- Specops Deploy +- Microsoft Group Policy Software Installation +- Manual installation (when running with admin privileges) + +The wrapped up MSI files from Endpoint Policy Manager should work with just about any other software +distribution tool as well. Therefore, you can quickly deploy Endpoint Policy Manager directives +without needing to use Group Policy to deploy your settings. Just create the XML data file, use +Endpoint Policy Manager Exporter to make an MSI, and then use your software deployment tool of +choice to deploy the MSI. Once the MSI is delivered to the target machines, the users will pick up +the XML files in their own directories (or the Computers folder), and Endpoint Policy Manager +components will receive their directives. We've provided a handful of XML files you can use. You can +find them in the Endpoint Policy Manager Portal in the "Latest Manuals" section, as shown in +Figure 1. + +![deploying_policypak_directives](/images/endpointpolicymanager/mdm/deploying_endpointpolicymanager_directives.webp) + +Figure 1. The list of XML files in the Endpoint Policy Manager Portal. + +Once unpacked, you should see a list of example XML files, displayed in Figure 2, which are wrapped +into an example MSI. + +![deploying_policypak_directives_1](/images/endpointpolicymanager/mdm/deploying_endpointpolicymanager_directives_1.webp) + +Figure 2. The wrapped XML file example. + +The provided Endpoint Policy Manager -XML-`Examples.msi` can be used immediately and contains a +wrapped-up version of the provided XML files. Below is a summary of what each XML example does: + +- `Ppam-winzip.xml` changes settings in the Password tab of WinZip 14.0 and 14.5. +- `Ppatm-screensaver-settings.xml` sets the Windows screensaver to 17 minutes and forces the machine + to be locked when it is powered back on. +- `Ppbr-examples` makes some sample Endpoint Policy Manager Browser Router routes. Specifically, it + will route endpointpolicymanager.com to Internet Explorer, GPanswers.com to Chrome, and Mozilla.org to + Firefox, and it will block Facebook.com. +- `Pplpm-run-procmon-elevated.xml` enables Process Monitor to bypass UAC prompts and run elevated. +- P`pprefs-shortcut.xml` shows a Endpoint Policy Manager shortcut item on the desktop. +- `Ppsm-rename-guest-account.xml` renames the local Guest account to ppGuest. + +By starting your journey with our pre-configured examples, we can help you troubleshoot a lot faster +than if you try other items, so we suggest you start with these examples. + +## Quick Start with MSI files and a UEM Tool + +Below are two videos you can use to get familiar with how to export settings and then use them with +a UEM tool. + +- [Deploy Real Group Policy using SCCM or Other Management System!](/docs/endpointpolicymanager/gettingstarted/misc/videos/methods/sccmgrouppolicy.md) +- Deploy Endpoint Policy Manager Settings Using SCCM or Other Management System! + +## Quick Start with MSI files and an MDM Tool + +To get started quickly with our sample MSI files and an MDM tool, we recommend watching the +following video: + +- [Endpoint Policy Manager and MDM walk before you run](/docs/endpointpolicymanager/deliverymethods/mdm/videos/gettingstarted/testsample.md) + +Then, you can learn more about how to use Endpoint Policy Manager with your own MDM tool on this +page: Getting Started with MDM > [Video Learning Center](/docs/endpointpolicymanager/deliverymethods/mdm/videos/videolearningcenter.md). diff --git a/docs/endpointpolicymanager/gettingstarted/mdmmanual/overview.md b/docs/endpointpolicymanager/gettingstarted/mdmmanual/overview.md new file mode 100644 index 0000000000..cb1cb3b2ad --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/mdmmanual/overview.md @@ -0,0 +1,68 @@ +--- +title: "MDM & UEM Tools" +description: "MDM & UEM Tools" +sidebar_position: 50 +--- + +# MDM & UEM Tools + +Deploying PolicyPak Directives without Group Policy + +If you're reading this section, you're likely interested in using Netwrix Endpoint Policy Manager +(formerly PolicyPak) in conjunction with Microsoft Endpoint Configuration Manager (MEMCM) (formerly +known as SCCM), Microsoft Intune, KACE, or your own systems management utility. The bullet points +below give the general idea of how you can use PolicyPak with these utilities. + +- All Endpoint Policy Manager components can export their settings as XML files. +- Those XML files can be imported into the Endpoint Policy Manager Exporter. +- The Endpoint Policy Manager Exporter makes MSI files. +- Those MSI files can be delivered using any technique you want: + + - Using an mobile device management (MDM) provider like: Microsoft Intune, VMware Workspace ONE, + etc. + - Using an unified endpoint management (UEM) tool like: SCCM, KACE, and so on. + +Therefore, you can deliver your settings to any machine with all the Endpoint Policy Manager +components (Endpoint Policy Manager Least Privilege Manager, Endpoint Policy Manager Application +Settings Manager, Endpoint Policy Manager Browser Router, Endpoint Policy Manager File Associations +Manager, Endpoint Policy Manager Preferences Manager, Endpoint Policy Manager Security Settings +Manager, and all the others) without using Group Policy as the delivery mechanism. + +:::note +For an overview of using Endpoint Policy Manager Exporter with the Endpoint Policy Manager +components, please see the following video: +[Deploying Endpoint Policy Managerdirectives without Group Policy (Endpoint Policy Manager Exporter Utility)](/docs/endpointpolicymanager/gettingstarted/misc/videos/methods/exporterutility.md). +::: + + +:::warning +Note that non-domain-joined machines are not supported with Endpoint Policy Manager +products, unless you are using the MDM method. That is, the machine must have been previously +domain-joined and be in an organizational unit (OU) that is licensed (or will be licensed from a +licensing file). To deliver settings to non-domain-joined machines, you must use Endpoint Policy +Manager Cloud. +::: + + +In the next sections, we're going to work through the following procedures: + +- Exporting settings from each Endpoint Policy Manager application as an XML file +- Using the Endpoint Policy Manager Exporter utility to make an MSI file +- Learning what happens after the MSI file is delivered + +## Reasons to Use XML Data Files to Deliver Settings + +There are a variety of scenarios in which you might not> want to use Group Policy to deliver +Endpoint Policy Manager directives, including the following: + +- You are using MEMCM, LANDesk, KACE, or similar software for software deployment, and your team + doesn't want to use Group Policy, but wants to use the components and functionality of Endpoint + Policy Manager. +- You are using a mobile device management (MDM) service such as Microsoft Intune, MobileIron, or + VMware Workspace ONE (formerly known as AirWatch). +- You have clients who have a domain-joined account but haven't been to the office to get the Group + Policy settings. +- You have a special machine that is domain-joined, but you don't want it to get Group Policy. + Instead, you want it to get some Endpoint Policy Manager directives. +- You are using Microsoft Intune or another remote management system to manage machines, and you + want to add Group Policy functionality, but that utility doesn't have Group Policy functionality. diff --git a/docs/endpointpolicymanager/gettingstarted/mdmmanual/tips/_category_.json b/docs/endpointpolicymanager/gettingstarted/mdmmanual/tips/_category_.json new file mode 100644 index 0000000000..95d467382f --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/mdmmanual/tips/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Endpoint Policy Manager Exporter Tips, Tricks, and Notes", + "position": 40, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/tips/copypaste.md b/docs/endpointpolicymanager/gettingstarted/mdmmanual/tips/copypaste.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/mdm/tips/copypaste.md rename to docs/endpointpolicymanager/gettingstarted/mdmmanual/tips/copypaste.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/tips/enableprioritymode.md b/docs/endpointpolicymanager/gettingstarted/mdmmanual/tips/enableprioritymode.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/mdm/tips/enableprioritymode.md rename to docs/endpointpolicymanager/gettingstarted/mdmmanual/tips/enableprioritymode.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/tips/manual.md b/docs/endpointpolicymanager/gettingstarted/mdmmanual/tips/manual.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/mdm/tips/manual.md rename to docs/endpointpolicymanager/gettingstarted/mdmmanual/tips/manual.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/tips/modify.md b/docs/endpointpolicymanager/gettingstarted/mdmmanual/tips/modify.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/mdm/tips/modify.md rename to docs/endpointpolicymanager/gettingstarted/mdmmanual/tips/modify.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/tips/overview.md b/docs/endpointpolicymanager/gettingstarted/mdmmanual/tips/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/mdm/tips/overview.md rename to docs/endpointpolicymanager/gettingstarted/mdmmanual/tips/overview.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/tips/processorder.md b/docs/endpointpolicymanager/gettingstarted/mdmmanual/tips/processorder.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/mdm/tips/processorder.md rename to docs/endpointpolicymanager/gettingstarted/mdmmanual/tips/processorder.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/tips/recycle.md b/docs/endpointpolicymanager/gettingstarted/mdmmanual/tips/recycle.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/mdm/tips/recycle.md rename to docs/endpointpolicymanager/gettingstarted/mdmmanual/tips/recycle.md diff --git a/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/_category_.json b/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/_category_.json new file mode 100644 index 0000000000..c1b4360f0a --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Using Endpoint Policy Manager with MDM and UEM Tools", + "position": 30, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "uemtools" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/mdm/_category_.json b/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/mdm/_category_.json new file mode 100644 index 0000000000..b8aac0f134 --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/mdm/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Troubleshooting", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/mdm/ensuringenrollment.md b/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/mdm/ensuringenrollment.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/mdm/ensuringenrollment.md rename to docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/mdm/ensuringenrollment.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/mdm/installhand.md b/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/mdm/installhand.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/mdm/installhand.md rename to docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/mdm/installhand.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/mdm/overview.md b/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/mdm/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/mdm/overview.md rename to docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/mdm/overview.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/mdm/successevents.md b/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/mdm/successevents.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/mdm/successevents.md rename to docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/mdm/successevents.md diff --git a/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/service/_category_.json b/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/service/_category_.json new file mode 100644 index 0000000000..47e89c70bb --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/service/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Using Endpoint Policy Manager with any MDM Service", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/service/microsoftintune.md b/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/service/microsoftintune.md similarity index 85% rename from docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/service/microsoftintune.md rename to docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/service/microsoftintune.md index 0570309ff2..97c3cf1498 100644 --- a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/service/microsoftintune.md +++ b/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/service/microsoftintune.md @@ -7,7 +7,7 @@ sidebar_position: 10 # Endpoint Policy Manager and Microsoft Intune MDM :::note -See [Endpoint Policy Manager and Microsoft Intune](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/gettingstarted/microsoftintune.md) for +See [Endpoint Policy Manager and Microsoft Intune](/docs/endpointpolicymanager/deliverymethods/mdm/videos/gettingstarted/microsoftintune.md) for an overview video of Endpoint Policy Manager and Microsoft Intune MDM. ::: @@ -26,4 +26,4 @@ item from the Add/Remove Programs options to prevent uninstallation. Using the f Once you select the group, you can change the Deployment Action to Required Install. Be sure the computer is MDM-joined and in the correct group. If the MSIs do not download as expected, see the -[Troubleshooting](/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/mdm/overview.md) section. +[Troubleshooting](/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/mdm/overview.md) section. diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/service/mobileiron.md b/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/service/mobileiron.md similarity index 93% rename from docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/service/mobileiron.md rename to docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/service/mobileiron.md index c1be2e27f1..3dd69e62dc 100644 --- a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/service/mobileiron.md +++ b/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/service/mobileiron.md @@ -7,7 +7,7 @@ sidebar_position: 30 # Endpoint Policy Manager and MobileIron MDM :::note -[Endpoint Policy Manager and MobileIron MDM](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/gettingstarted/mobileiron.md) for a video +[Endpoint Policy Manager and MobileIron MDM](/docs/endpointpolicymanager/deliverymethods/mdm/videos/gettingstarted/mobileiron.md) for a video overview of Endpoint Policy Manager and MobileIron. ::: @@ -62,4 +62,4 @@ service. ![using_policypak_with_mdm_and_18](/images/endpointpolicymanager/mdm/service/using_endpointpolicymanager_with_mdm_and_18.webp) Be sure the computer is MDM-joined and in the correct group (if any). If the MSIs do not download as -expected, see [Troubleshooting](/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/mdm/overview.md). +expected, see [Troubleshooting](/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/mdm/overview.md). diff --git a/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/service/overview.md b/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/service/overview.md new file mode 100644 index 0000000000..452b3c31d0 --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/service/overview.md @@ -0,0 +1,90 @@ +--- +title: "Using Endpoint Policy Manager with any MDM Service" +description: "Using Endpoint Policy Manager with any MDM Service" +sidebar_position: 10 +--- + +# Using Endpoint Policy Manager with any MDM Service + +You can use Endpoint Policy Manager with any MDM service you already have, like Intune, VMware +Workspace ONE (formerly Airwatch), MobileIron, etc. Below we see a systems hierarchical breakdown +when using Endpoint Policy Manager with any MDM system. + +![using_policypak_with_mdm_and_1](/images/endpointpolicymanager/mdm/service/using_endpointpolicymanager_with_mdm_and_1.webp) + +:::note + +[Deploying Real Group Policy (and Extra Endpoint Policy Manager Settings) Overview](/docs/endpointpolicymanager/deliverymethods/mdm/videos/gettingstarted/realgrouppolicy.md)a +video overview of Endpoint Policy Manager and MDM. +::: + + +The ultimate goal is to upload the following Endpoint Policy Manager items to your MDM service and +then have them downloaded: + +- Endpoint Policy Manager MSI client +- Endpoint Policy Manager MDM license MSI +- Endpoint Policy Manager example MSI (or your own MSIs) + +However, we strongly recommend you first verify that the license and MSI files are working perfectly +before actually performing all these steps. Therefore, our recommendation would be as follows: + +On one machine proceed in the following manner: + +**Step 1 –** Join MDM. + +**Step 2 –** Install Endpoint Policy Manager MSI by hand. + +**Step 3 –** Install Endpoint Policy Manager licenses MSI by hand. + +**Step 4 –** Install Endpoint Policy Manager example policies MSI by hand. + +This will ensure all the correct parts are working in concert before you attempt to use an MDM +service to deliver these components. + +:::note +See [Endpoint Policy Manager and MDM walk before you run](/docs/endpointpolicymanager/deliverymethods/mdm/videos/gettingstarted/testsample.md) a +video of this process. +::: + + +Once you've completed these procedures, you're ready to actually perform the steps needed to get the +files deployed using your MDM service. The ultimate result and goal will be that the Endpoint Policy +Manager MSI client, the Endpoint Policy Manager MDM license MSI, and the Endpoint Policy Manager +examples (or your own wrapped up examples) are downloaded from your MDM service and installed on the +system. + +Optionally, you can view or hide these components by using the Add/Remove Programs applet in the +Control Panel. An example of a final deployment would look something like this: + +![using_policypak_with_mdm_and_2](/images/endpointpolicymanager/mdm/service/using_endpointpolicymanager_with_mdm_and_2.webp) + +The typical command you want your MDM service to run for each component would be something like +this: + +``` +msiexec /i "PolicyPak Client-side extension x64.msi" /qn ARPSYSTEMCOMPONENT=1 +``` + +``` +msiexec /i "endpointpolicymanager-Exported-Settings.msi" /qn ARPSYSTEMCOMPONENT=1 +``` + +``` +msiexec /i "Fabrikam-License1.msi" /qn ARPSYSTEMCOMPONENT=1 +``` + +It should be noted that: + +- The `/qn` flag runs the MSI silently. +- The `/ARPSYSTEMCOMPONENT=1` is optional and will hide the deployed MSI from Add/Remove Programs so + users or admins won't see it installed or try to remove it. + +:::note +The name of the actual license file you get might be somewhat different. +::: + + +The next three sections discuss a few setup tips and tricks for Microsoft Intune MDM, MobileIron +MDM, and VMware Workspace ONE MDM. The setup steps may vary a little from what is listed in the next +few sections, but they are the basic steps for each of the major services. diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/service/vmwareworkspaceone.md b/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/service/vmwareworkspaceone.md similarity index 95% rename from docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/service/vmwareworkspaceone.md rename to docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/service/vmwareworkspaceone.md index 1431c69aa3..a76f2271a9 100644 --- a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/service/vmwareworkspaceone.md +++ b/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/service/vmwareworkspaceone.md @@ -8,7 +8,7 @@ sidebar_position: 20 :::note See -[Endpoint Policy Managerand Workspace One (Airwatch) MDM: Deploy Group Policy and Endpoint Policy Manager superpowers today](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/gettingstarted/workspaceone.md) +[Endpoint Policy Managerand Workspace One (Airwatch) MDM: Deploy Group Policy and Endpoint Policy Manager superpowers today](/docs/endpointpolicymanager/deliverymethods/mdm/videos/gettingstarted/workspaceone.md) for a video overview of Endpoint Policy Manager and VMware Workspace ONE MDM ::: diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/uemtools.md b/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/uemtools.md similarity index 95% rename from docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/uemtools.md rename to docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/uemtools.md index 980564f556..7e550e9fad 100644 --- a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/uemtools.md +++ b/docs/endpointpolicymanager/gettingstarted/mdmmanual/uemtools/uemtools.md @@ -36,6 +36,6 @@ any systems management utility. :::note For a series of videos to get started with Endpoint Policy Manager and any UEM tool, like SCCM, KACE, etc., see the following link: Getting Started with Endpoint Policy Manager (Misc) > -[Knowledge Base](/docs/endpointpolicymanager/knowledgebase/knowledgebase.md). +[Knowledge Base](/docs/endpointpolicymanager/). ::: diff --git a/docs/endpointpolicymanager/gettingstarted/mdmmanual/xmldatafiles/_category_.json b/docs/endpointpolicymanager/gettingstarted/mdmmanual/xmldatafiles/_category_.json new file mode 100644 index 0000000000..934bee403e --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/mdmmanual/xmldatafiles/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Exporting Directives as XML Data Files", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/xmldatafiles/administrativetemplates.md b/docs/endpointpolicymanager/gettingstarted/mdmmanual/xmldatafiles/administrativetemplates.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/mdm/xmldatafiles/administrativetemplates.md rename to docs/endpointpolicymanager/gettingstarted/mdmmanual/xmldatafiles/administrativetemplates.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/xmldatafiles/applicationssettings.md b/docs/endpointpolicymanager/gettingstarted/mdmmanual/xmldatafiles/applicationssettings.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/mdm/xmldatafiles/applicationssettings.md rename to docs/endpointpolicymanager/gettingstarted/mdmmanual/xmldatafiles/applicationssettings.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/xmldatafiles/browserrouter.md b/docs/endpointpolicymanager/gettingstarted/mdmmanual/xmldatafiles/browserrouter.md similarity index 88% rename from docs/endpointpolicymanager/manuals/introductionandquick/mdm/xmldatafiles/browserrouter.md rename to docs/endpointpolicymanager/gettingstarted/mdmmanual/xmldatafiles/browserrouter.md index b8e5113471..930106877b 100644 --- a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/xmldatafiles/browserrouter.md +++ b/docs/endpointpolicymanager/gettingstarted/mdmmanual/xmldatafiles/browserrouter.md @@ -10,7 +10,7 @@ Endpoint Policy Manager Browser Router settings can be exported as an XML file. Right-click` Computer Configuration | PolicyPak | Browser Router` or `User Configuration | PolicyPak | Browser Router`, and pick the collection you wish to export, as shown in Figure 13. For full details on the Endpoint Policy Manager Browser Router, see Book 5: -[Browser Router](/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/overview.md). +[Browser Router](/docs/endpointpolicymanager/components/browserrouter/overview.md). ![deploying_policypak_directives_12](/images/endpointpolicymanager/mdm/xmldatafiles/deploying_endpointpolicymanager_directives_12.webp) diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/xmldatafiles/feature.md b/docs/endpointpolicymanager/gettingstarted/mdmmanual/xmldatafiles/feature.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/mdm/xmldatafiles/feature.md rename to docs/endpointpolicymanager/gettingstarted/mdmmanual/xmldatafiles/feature.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/xmldatafiles/fileassociations.md b/docs/endpointpolicymanager/gettingstarted/mdmmanual/xmldatafiles/fileassociations.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/mdm/xmldatafiles/fileassociations.md rename to docs/endpointpolicymanager/gettingstarted/mdmmanual/xmldatafiles/fileassociations.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/xmldatafiles/javaenterpriserules.md b/docs/endpointpolicymanager/gettingstarted/mdmmanual/xmldatafiles/javaenterpriserules.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/mdm/xmldatafiles/javaenterpriserules.md rename to docs/endpointpolicymanager/gettingstarted/mdmmanual/xmldatafiles/javaenterpriserules.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/xmldatafiles/leastprivilegemanager.md b/docs/endpointpolicymanager/gettingstarted/mdmmanual/xmldatafiles/leastprivilegemanager.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/mdm/xmldatafiles/leastprivilegemanager.md rename to docs/endpointpolicymanager/gettingstarted/mdmmanual/xmldatafiles/leastprivilegemanager.md diff --git a/docs/endpointpolicymanager/gettingstarted/mdmmanual/xmldatafiles/overview.md b/docs/endpointpolicymanager/gettingstarted/mdmmanual/xmldatafiles/overview.md new file mode 100644 index 0000000000..f6f967f871 --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/mdmmanual/xmldatafiles/overview.md @@ -0,0 +1,159 @@ +--- +title: "Exporting Directives as XML Data Files" +description: "Exporting Directives as XML Data Files" +sidebar_position: 20 +--- + +# Exporting Directives as XML Data Files + +Creating Endpoint Policy Manager XML data files is easy. But each Endpoint Policy Manager component +has a slightly different way to make and export XML data files. The XML data files you export can +then be used with Endpoint Policy Manager Exporter (with MEMCM, KACE, Microsoft Intune, etc.) or +with Endpoint Policy Manager Cloud. We will discuss these processes in the following sections. Note +that instructions are not included for all components. We've provided a representative sample of +most of the components, and most will export in a similar way. All the exceptions are noted here, +however, like Admin Templates Manager, Application Settings Manager, and Security Settings manager, +which are somewhat different than the others. + +:::note +For a video overview of how to wrap up XML data and license files into MSI files, see the +following link: +[Deploying Endpoint Policy Managerdirectives without Group Policy (Endpoint Policy Manager Exporter Utility)](/docs/endpointpolicymanager/deliverymethods/mdm/videos/exportingtips/exporterutility.md). +::: + + +Now that you have your XML data files, you're ready to bundle them up and make them into an MSI for +easy deployment using any software distribution utility, such as Microsoft Endpoint Configuration +Manager (MEMCM), Microsoft Intune, MobileIron, VMware Workspace ONE, KACE, LANDesk, or anything else +that uses MSI files. + +**Step 1 –** When you install the Endpoint Policy Manager Admin Console MSI, you automatically +install the Endpoint Policy Manager Exporter utility. In order to launch it, locate the utility's +icon in the Start menu within Endpoint Policy Manager Application Settings Manager, as shown in +Figure 3. + +![deploying_policypak_directives_2](/images/endpointpolicymanager/mdm/xmldatafiles/deploying_endpointpolicymanager_directives_2.webp) + +Figure 3. The Endpoint Policy Manager Exporter utility icon in the Start menu. + +This utility enables you to do any of the following: + +- Create new Endpoint Policy Manager Application Settings Manager XML data files +- Use existing XML data files from all Endpoint Policy Manager products +- Use Endpoint Policy Manager licensing files +- Map which XML data files should be installed for which users on target machines +- Open existing MSI files you previously created and quickly edit and enable modifications and + upgrades + +In this demonstration of Endpoint Policy Manager Exporter, we'll assume you have a collection of +Endpoint Policy Manager XML data files or a Endpoint Policy Manager licensing file you want to wrap +up into an MSI file for easy deployment. Let's assume you had the following XML data files (as shown +in Table 1) and wanted to ensure that the following users received the directives when logging on to +specific machines. + +Table 1: Example files. + +| File Name | File Type | Users Receiving the File | +| ----------------------------------- | ------------------------------------------------------------------ | ------------------------------------------------------ | +| WinZip1.xml | Endpoint Policy Manager Application Settings Manager XML data file | EastSalesUser1, EastSalesUser2, Active Directory users | +| FireFox1.xml | Endpoint Policy Manager Application Settings Manager XML data file | Computer (All Users) | +| Enforce Default Browser.xml | Endpoint Policy Manager Browser Router Manager XML data file | Computer (All Users) | +| Control Panel Settings.xml | Endpoint Policy Manager Admin Templates Manager XML data file | Computer (All Users) | +| Important Security Settings.xml | Endpoint Policy Manager Security Settings Manager XML data file | Computer (All Users), forced | +| Fabrikam.Local-License-Key-file.xml | Endpoint Policy Manager license file | Computer (All Users), forced | + +When Endpoint Policy Manager Exporter is launched, you'll be able to perform the actions shown in +Figure 4. + +![deploying_policypak_directives_3](/images/endpointpolicymanager/mdm/xmldatafiles/deploying_endpointpolicymanager_directives_3.webp) + +Figure 4. The Endpoint Policy Manager Exporter tool helps the user create XML data files and package +the files into an MSI installer. + +**Step 2 –** Endpoint Policy Manager Exporter will create MSIs from your existing XML data files and +Endpoint Policy Manager licensing files or open up an existing MSI that you created earlier using +this tool. For now, select "Create a new MSI installer." Then, you'll see the option, "Add Existing +Files," as shown in Figure 5. + +![deploying_policypak_directives_4](/images/endpointpolicymanager/mdm/xmldatafiles/deploying_endpointpolicymanager_directives_4.webp) + +Figure 5. The option to add existing files. + +The "Add Existing Files" button lets you bring in the following types of files: + +- Any Endpoint Policy Manager XML data files (such as from Endpoint Policy Manager Application + Settings Manager, Endpoint Policy Manager Browser Router, Endpoint Policy Manager Least Privilege + Manager, etc.) +- Microsoft Group Policy Preferences XML data files +- Microsoft Security Group Policy settings exported as XML data files using Endpoint Policy Manager + Security Settings Manager +- Microsoft Admin Template settings exported using Endpoint Policy Manager Admin Templates Manager +- Endpoint Policy Manager licensing files for Endpoint Policy Manager and the Endpoint Policy + Manager Group Policy Compliance Reporter + +With Endpoint Policy Manager Exporter you can wrap these up into an MSI. In Figure 6, we have added +a variety of exported XML settings. + +![deploying_policypak_directives_5](/images/endpointpolicymanager/mdm/xmldatafiles/deploying_endpointpolicymanager_directives_5.webp) + +Figure 6. Exported XML settings. + +:::note +You cannot add more than one licensing file of the same product type to an MSI project. +::: + + +**Step 3 –** Next, you can dictate which files will be delivered to which users, or to Computer (All +Users). + +:::note +For MDM and Endpoint Policy Manager Cloud scenarios, it's common to specify the settings +affecting Computer (All Users), so you can guarantee that whoever is on the machine will get the +settings. +::: + + +**Step 4 –** By default, newly added XML data files will be delivered to all users, as shown in +Figure 7. This means the settings get delivered to the Computer side, and the result is that all +users must receive the settings. However, in our example, we want the WinZip1.xml file to be +delivered to EastSalesUser1 and EastSalesUser2. Therefore, use the dropdown menu under "Install +For," and change it from "Computer" to "Users & Groups." After you do this, the Target column +populates with "0 Users," as illustrated in Figure 7. + +![deploying_policypak_directives_6](/images/endpointpolicymanager/mdm/xmldatafiles/deploying_endpointpolicymanager_directives_6.webp) + +Figure 7. Selecting which group will get the XML data files. + +**Step 5 –** Click on "0 Users" to specify the users you want the WinZip1.xml file to work with. In +the Select Users or Groups dialog, click "Add Users / Groups," and specify the users (or groups) you +want this XML data file to apply to (see Figure 8). Then click "OK." + +![deploying_policypak_directives_7](/images/endpointpolicymanager/mdm/xmldatafiles/deploying_endpointpolicymanager_directives_7.webp) + +Figure 8. Selecting the targeted users. + +Notice that `theWinZip1.xml` file is now set to be delivered to two users (see Figure 9). You can +also specify Active Directory groups instead of just users. To help specify these types of users, +the Target column will express how many users and how many groups are being targeted. + +![deploying_policypak_directives_8](/images/endpointpolicymanager/mdm/xmldatafiles/deploying_endpointpolicymanager_directives_8.webp) + +Figure 9. The Target column shows how many users and how many groups are being targeted. + +:::note +Licensing files are always set to deliver to all users. +::: + + +**Step 6 –** You can repeat the process by clicking on "Create New PPAM XMLdata File" or "Add +Existing Files" and then specifying which users you want the directives to apply to. When you are +done, click "Next" to continue. This will initiate the Installer Properties page where you can name +the MSI and manufacturer however you wish (as shown in Figure 10). + +![deploying_policypak_directives_9](/images/endpointpolicymanager/mdm/xmldatafiles/deploying_endpointpolicymanager_directives_9.webp) + +Figure 10. Naming the MSI. + +**Step 7 –** When you click "Next" in the Installer Properties page, you will be prompted to save +your MSI file. If you need it later, the MSI file can be opened and edited again (see the section +"Modifying Existing MSI files with Endpoint Policy Manager Exporter"). diff --git a/docs/endpointpolicymanager/gettingstarted/mdmmanual/xmldatafiles/preferences.md b/docs/endpointpolicymanager/gettingstarted/mdmmanual/xmldatafiles/preferences.md new file mode 100644 index 0000000000..d90eb437f9 --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/mdmmanual/xmldatafiles/preferences.md @@ -0,0 +1,28 @@ +--- +title: "XML Data Files from Endpoint Policy Preferences Manager" +description: "XML Data Files from Endpoint Policy Preferences Manager" +sidebar_position: 70 +--- + +# XML Data Files from Endpoint Policy Preferences Manager + +To make an XML file from a Group Policy Preference item, first create the item. Be sure to embed any +Group Policy Preference Item-Level Targeting within your item to limit when the item will apply. For +instance, you may want to limit by operating system, IP address range, the presence of a file, and +so on. Refer to Book 9: [Preferences Manager](/docs/endpointpolicymanager/components/preferencesmanager/manual/overview.md), for more details. +Then, drag the Group Policy Preference item from the MMC console to create the XML data file. You +can drag this file to a folder or your desktop, as shown in Figure 19. + +![deploying_policypak_directives_19](/images/endpointpolicymanager/mdm/xmldatafiles/deploying_endpointpolicymanager_directives_19.webp) + +Figure 19. Dragging the the Group Policy Preference item from the MMC console to the desktop in +order to create a XML data file. + +Alternatively, the Endpoint Policy Manager management console can also export existing Group Policy +Preference items from within an existing GPO (without you needing to drag and drop items one by +one). You can see an example of this in Figure 20. + +![deploying_policypak_directives_20](/images/endpointpolicymanager/mdm/xmldatafiles/deploying_endpointpolicymanager_directives_20.webp) + +Figure 20. The user can export an existing GPO through the Endpoint Policy Manager management +console. diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/xmldatafiles/scripts.md b/docs/endpointpolicymanager/gettingstarted/mdmmanual/xmldatafiles/scripts.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/mdm/xmldatafiles/scripts.md rename to docs/endpointpolicymanager/gettingstarted/mdmmanual/xmldatafiles/scripts.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/xmldatafiles/securitysettings.md b/docs/endpointpolicymanager/gettingstarted/mdmmanual/xmldatafiles/securitysettings.md similarity index 88% rename from docs/endpointpolicymanager/manuals/introductionandquick/mdm/xmldatafiles/securitysettings.md rename to docs/endpointpolicymanager/gettingstarted/mdmmanual/xmldatafiles/securitysettings.md index fcabf2158e..ea3c01a46e 100644 --- a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/xmldatafiles/securitysettings.md +++ b/docs/endpointpolicymanager/gettingstarted/mdmmanual/xmldatafiles/securitysettings.md @@ -10,7 +10,7 @@ Endpoint Policy Manager Security Settings Manager will export the computer-side GPO as an XML file. Right-click `Computer Configuration | PolicyPak | Security Manager`, and select the only setting that is available in the menu, as shown in Figure 21. For full details on the Endpoint Policy Manager Security Settings Manager Export Wizard, see Book 10: -[Security Settings Manager](/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/securitysettings/overview.md). +[Security Settings Manager](/docs/endpointpolicymanager/components/securitysettingsmanager/manual/overview.md). ![deploying_policypak_directives_21](/images/endpointpolicymanager/mdm/xmldatafiles/deploying_endpointpolicymanager_directives_21.webp) diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/xmldatafiles/startscreen.md b/docs/endpointpolicymanager/gettingstarted/mdmmanual/xmldatafiles/startscreen.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/mdm/xmldatafiles/startscreen.md rename to docs/endpointpolicymanager/gettingstarted/mdmmanual/xmldatafiles/startscreen.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/xmldatafiles/taskbar.md b/docs/endpointpolicymanager/gettingstarted/mdmmanual/xmldatafiles/taskbar.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/mdm/xmldatafiles/taskbar.md rename to docs/endpointpolicymanager/gettingstarted/mdmmanual/xmldatafiles/taskbar.md diff --git a/docs/endpointpolicymanager/gettingstarted/misc/_category_.json b/docs/endpointpolicymanager/gettingstarted/misc/_category_.json new file mode 100644 index 0000000000..bd8acf57fb --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/misc/_category_.json @@ -0,0 +1 @@ +{"label":"Misc","position":40,"collapsed":true,"collapsible":true} diff --git a/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/_category_.json b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/_category_.json new file mode 100644 index 0000000000..ebf9bc76c5 --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/_category_.json @@ -0,0 +1 @@ +{"label":"Knowledge Base","position":1,"collapsed":true,"collapsible":true,"link":{"type":"doc","id":"knowledgebase"}} diff --git a/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/changemanagementutilities/_category_.json b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/changemanagementutilities/_category_.json new file mode 100644 index 0000000000..df8e174b92 --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/changemanagementutilities/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Endpoint Policy Manager & Change Management Utilities", + "position": 70, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/changemanagementutilities/changemanagementtools.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/changemanagementutilities/changemanagementtools.md similarity index 88% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/changemanagementutilities/changemanagementtools.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/changemanagementutilities/changemanagementtools.md index 15dc82100a..b4f40f0682 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/changemanagementutilities/changemanagementtools.md +++ b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/changemanagementutilities/changemanagementtools.md @@ -80,7 +80,7 @@ function, as they are not managed by Endpoint Policy Manager. ![921_2_image-3](/images/endpointpolicymanager/troubleshooting/921_2_image-3.webp) You can watch a demo of how Endpoint Policy Manager stores and tracks changes in this video: -[Endpoint Policy Manager MMC: Showing History of items you create](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/changemanagementutilities/changemanagementtools.md). +[Endpoint Policy Manager MMC: Showing History of items you create](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/changemanagementutilities/changemanagementtools.md). ## Summary of Endpoint Policy Manager vs. GPO Change Management Tools @@ -99,19 +99,19 @@ Endpoint Policy Manager-specific settings. Here are examples of Endpoint Policy Manager working alongside popular GPO Change Management tools: - Endpoint Policy Manager with AGPM, see the - [Endpoint Policy Manager and AGPM](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/changemanagementutilities/advancedgrouppolicymanagement.md) + [Endpoint Policy Manager and AGPM](/docs/endpointpolicymanager/gettingstarted/misc/videos/changemanagementutilities/advancedgrouppolicymanagement.md) topic for additional information. - Endpoint Policy Manager with Quest's GPOADmin Tool, see the - [Endpoint Policy Manager and Quest's GPOADmin Tool](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/changemanagementutilities/gpoadmintool.md) + [Endpoint Policy Manager and Quest's GPOADmin Tool](/docs/endpointpolicymanager/gettingstarted/misc/videos/changemanagementutilities/gpoadmintool.md) topic for additional information. - Endpoint Policy Manager integrated with NetIQ GPA, see the - [Endpoint Policy Manager Integrates with NetIQ GPA](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/changemanagementutilities/netiq.md) topic + [Endpoint Policy Manager Integrates with NetIQ GPA](/docs/endpointpolicymanager/gettingstarted/misc/videos/changemanagementutilities/netiq.md) topic for additional information. - Endpoint Policy Manager with Quest (ScriptLogic) Active Administrator, see the - [Endpoint Policy Manager and Quest (ScriptLogic) ActiveAdministrator](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/changemanagementutilities/scriptlogicactiveadministrator.md) topic + [Endpoint Policy Manager and Quest (ScriptLogic) ActiveAdministrator](/docs/endpointpolicymanager/gettingstarted/misc/videos/changemanagementutilities/scriptlogicactiveadministrator.md) topic for additional information. - Endpoint Policy Manager with SDM Change Manager, see the - [Endpoint Policy Manager and SDM CHANGE MANAGER](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/changemanagementutilities/sdmchangemanager.md) topic + [Endpoint Policy Manager and SDM CHANGE MANAGER](/docs/endpointpolicymanager/gettingstarted/misc/videos/changemanagementutilities/sdmchangemanager.md) topic for additional information. Additionally, tools like Netwrix Auditor can monitor all GPO changes for both Microsoft and Endpoint diff --git a/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/gettingstarted/_category_.json b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/gettingstarted/_category_.json new file mode 100644 index 0000000000..7eb735f33a --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/gettingstarted/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Getting Started", + "position": 10, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/gettingstarted/arm.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/gettingstarted/arm.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/gettingstarted/arm.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/gettingstarted/arm.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/gettingstarted/guide.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/gettingstarted/guide.md similarity index 78% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/gettingstarted/guide.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/gettingstarted/guide.md index c3e1635198..ae68de4e19 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/gettingstarted/guide.md +++ b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/gettingstarted/guide.md @@ -6,5 +6,5 @@ sidebar_position: 10 # Does Endpoint Policy Manager have a Quick Start Guide? -Yes, see the [Netwrix Endpoint Policy Manager Quick Start](/docs/endpointpolicymanager/manuals/introductionandquick/quickstart/overview.md) topic to help you get +Yes, see the [Netwrix Endpoint Policy Manager Quick Start](/docs/endpointpolicymanager/gettingstarted/quickstart/overview.md) topic to help you get started with Netwrix Endpoint Policy Manager (formerly PolicyPak) immediately. diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/gettingstarted/guideinstall.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/gettingstarted/guideinstall.md similarity index 77% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/gettingstarted/guideinstall.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/gettingstarted/guideinstall.md index caa4c2be36..2d90dc3d5a 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/gettingstarted/guideinstall.md +++ b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/gettingstarted/guideinstall.md @@ -6,5 +6,5 @@ sidebar_position: 20 # Does Endpoint Policy Manager have an Installation Quick Start Guide? -Yes, see the [Installation Quick Start](/docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/overviewinstall.md) topic for information on how to install +Yes, see the [Installation Quick Start](/docs/endpointpolicymanager/gettingstarted/overviewinstall/overviewinstall.md) topic for information on how to install Netwrix Endpoint Policy Manager (formerly PolicyPak) . diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/gettingstarted/history.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/gettingstarted/history.md similarity index 87% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/gettingstarted/history.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/gettingstarted/history.md index 910536b222..36ddf9874e 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/gettingstarted/history.md +++ b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/gettingstarted/history.md @@ -20,9 +20,9 @@ Before 2017 - New Component: File Associations Manager: Quickly map PDF, MAILTO:, and others to the right apps. - Reduce GPOs and convert them to use for MDM: - [Reduce GPOs (and/or export them for use with Endpoint Policy Manager Cloud or with MDM)](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/admintemplatesmethods/reducegpos.md) + [Reduce GPOs (and/or export them for use with Endpoint Policy Manager Cloud or with MDM)](/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/admintemplatesmethods/reducegpos.md) - Least Privilege Manager: SecureRun(TM) blocks Ransomware - [Events](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/events.md) + [Events](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/eventing/events.md) - New Component: New Endpoint Policy Manager Start Screen & Taskbar Manager: Manage Windows 10 tile layouts perfectly. @@ -32,7 +32,7 @@ Before 2017 PowerShell - Least Privilege Manager Helper Tools: Enable Standard users to update Network Card and Printer settings, plus uninstall applications - [Overcome Network Card, Printer, and Remove Programs UAC prompts](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/helperstoolsandtips/uacprompts.md) + [Overcome Network Card, Printer, and Remove Programs UAC prompts](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/helperstoolsandtips/uacprompts.md) 2019 @@ -40,7 +40,7 @@ Before 2017 Processes - IE Sitelist to Browser Router import - Least Privilege Manager Block PowerShell Malware - attacks:[Block PowerShell in General, Open up for specific items](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/powershellblock.md) + attacks:[Block PowerShell in General, Open up for specific items](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/powershellblock.md) - New Component — Endpoint Policy Manager Feature Manager for Windows. Quickly add / remove features from Windows 10 & Windows Server. @@ -49,20 +49,20 @@ Before 2017 - New Component — Endpoint Policy Manager RDP Manager: Enable remote work users to have .RDP files to connect to your resources. - Browser Router - New Edge Support / IE In Edge Mode - [Manage Internet Explorer 11 and Edge Compatibility, Enterprise Modes and IE-in-Edge Mode](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/gettingstarted/ie.md) + [Manage Internet Explorer 11 and Edge Compatibility, Enterprise Modes and IE-in-Edge Mode](/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/gettingstarted/ie.md) - Browser Router Apply Once then Drift - [Endpoint Policy Manager Browser Router: Set the Windows 10 Default Browser (once) then drift](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/defaultwindows10.md) + [Endpoint Policy Manager Browser Router: Set the Windows 10 Default Browser (once) then drift](/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/tipsandtricks/defaultwindows10.md) - File Associations Manager Apply Once then Drift - [Endpoint Policy Manager File Associations Manager: Apply once (and drift)](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/gettingstarted/applyonce.md) + [Endpoint Policy Manager File Associations Manager: Apply once (and drift)](/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/gettingstarted/applyonce.md) - File Associations Manager Apply settings on USER side - Added Triggers to Endpoint Policy Manager Scripts & Triggers: Run a script at VPN launch or many other events - Added Email method for PPLPM Admin Approval - [Using Email / Long Codes](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/longcodes.md) + [Using Email / Long Codes](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/adminapproval/longcodes.md) - New Component — Remote Work Delivery Manager: Deliver software to Windows 10 via SMB share, Amazon S3 or other cloud services - Least Privlege Manager: Automatically block unsigned Applications - [Least Privilege Manager: Block All Unsigned with SecureRun](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/preventunsigned.md) + [Least Privilege Manager: Block All Unsigned with SecureRun](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/howtoandtechsupport/preventunsigned.md) - Compliance Reporter now 10x faster 2021 diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/gettingstarted/prepare.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/gettingstarted/prepare.md similarity index 93% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/gettingstarted/prepare.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/gettingstarted/prepare.md index e2bb189eb4..3e322709af 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/gettingstarted/prepare.md +++ b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/gettingstarted/prepare.md @@ -50,7 +50,7 @@ but not mandatory. :::note Check this link on how to install the GPMC on your Admin / GPMC machine: -[What are the two ways that can I install the GPMC on my Admin Station (Server or Windows 10) machine?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/gpoinitialinstall/methods.md) +[What are the two ways that can I install the GPMC on my Admin Station (Server or Windows 10) machine?](/docs/endpointpolicymanager/installation/knowledgebase/gpoinitialinstall/methods.md) ::: @@ -109,7 +109,7 @@ do anything. [https://www.microsoft.com/en-us/evalcenter/evaluate-windows-server-2016/](https://www.microsoft.com/en-us/evalcenter/evaluate-windows-server-2016/) **Step 2 –** Then be sure to run these steps on this video to make your first domain controller in a -new domain: [How to create a DC for editing purposes](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/testlabbestpractices/createdc.md) +new domain: [How to create a DC for editing purposes](/docs/endpointpolicymanager/deliverymethods/cloud/videos/testlabbestpractices/createdc.md) :::note The domain controller name and domain name do no matter. @@ -130,7 +130,7 @@ first tests. - If you can do without a special Antivirus or special security software on this example machine, that will be best. If you MUST use A/V or security software, please perform these steps: - [How must I configure my Anti-virus or system-level software to work with Endpoint Policy Manager CSE?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/antivirussystemsoftware/antivirus.md) + [How must I configure my Anti-virus or system-level software to work with Endpoint Policy Manager CSE?](/docs/endpointpolicymanager/upgrademaintenance/antivirussystemsoftware/antivirus.md) For Endpoint Policy Manager Group Policy Edition: @@ -150,7 +150,7 @@ For Endpoint Policy Manager Cloud and Endpoint Policy Manager MDM: First, know that Endpoint Policy Manager and other security software may not play nicely together right away. As such, please review and follow these guidelines first: -[How must I configure my Anti-virus or system-level software to work with Endpoint Policy Manager CSE?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/antivirussystemsoftware/antivirus.md) +[How must I configure my Anti-virus or system-level software to work with Endpoint Policy Manager CSE?](/docs/endpointpolicymanager/upgrademaintenance/antivirussystemsoftware/antivirus.md) Second, please install all of the following software on your example endpoint(s): @@ -171,7 +171,7 @@ on the endpoint. **Step 5 –** (Recommended): Endpoint Policy Manager's engine can be controlled via ADMX settings and having these pre-staged and ready to go can help us workaround issues from time to time. To pre-install the ADMX settings please watch this video: -[Troubleshooting with ADMX files](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/admxfiles.md) +[Troubleshooting with ADMX files](/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/admxfiles.md) **Step 6 –** (Recommended): If you want to perform some Endpoint Policy Manager Least Privilege base hits: Install any software you want to see magically work with Endpoint Policy Manager Least @@ -218,7 +218,7 @@ To run Endpoint Policy Manager Licensed: - Endpoint Policy Manager Group Policy Edition: - Please pre-install the LICENSE FILES you received. See - [How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/installall/installuniversal.md) + [How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/licensing/videolearningcenter/installall/installuniversal.md) We generally recommend Way #2. - The computer should be placed in one of your licensed OUs ahead of our meeting. @@ -240,7 +240,7 @@ To run Endpoint Policy Manager Un-licensed (any version): :::note When a computer has COMPUTER in the name it pretends to be fully licensed for trial purposes. More details on this topic: - [Testing and Troubleshooting By Renaming an endpoint Computer](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/usingwithothermethods/mdm.md) + [Testing and Troubleshooting By Renaming an endpoint Computer](/docs/endpointpolicymanager/deliverymethods/cloud/videos/usingwithothermethods/mdm.md) ::: @@ -272,7 +272,7 @@ Endpoint Policy Manager MDM Licensing can be a little tricky. - If you rename the computer to have COMPUTER in the name, the computer will act fully licensed. - If we supplied a license file to you, we'd like for you to pre-test that out. Here's the video to demonstrate exactly how to verify the MDM license file (sent as an MSI file) will work. - [Endpoint Policy Manager and MDM walk before you run](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/gettingstarted/testsample.md) + [Endpoint Policy Manager and MDM walk before you run](/docs/endpointpolicymanager/deliverymethods/mdm/videos/gettingstarted/testsample.md) ## Part 8: Final thoughts for Endpoint Policy Manager Cloud and Endpoint Policy Manager MDM @@ -295,10 +295,10 @@ Endpoint Policy Manager MDM. If you do not have a “real” or “not real domain” please see and perform these steps: -**Step 1 –** [How to create a DC for editing purposes](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/testlabbestpractices/createdc.md) +**Step 1 –** [How to create a DC for editing purposes](/docs/endpointpolicymanager/deliverymethods/cloud/videos/testlabbestpractices/createdc.md) **Step 2 –** -[Testing and Troubleshooting By Renaming an endpoint Computer](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/testlabbestpractices/renameendpoint.md) +[Testing and Troubleshooting By Renaming an endpoint Computer](/docs/endpointpolicymanager/deliverymethods/cloud/videos/testlabbestpractices/renameendpoint.md) ## Part 9: Converting from another least-privilege tool to Endpoint Privilege Manager diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/gettingstarted/rightclick.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/gettingstarted/rightclick.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/gettingstarted/rightclick.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/gettingstarted/rightclick.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/gettingstarted/windows11.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/gettingstarted/windows11.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/gettingstarted/windows11.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/gettingstarted/windows11.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/gettingstarted/windows7.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/gettingstarted/windows7.md similarity index 94% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/gettingstarted/windows7.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/gettingstarted/windows7.md index 6a334e0bbc..be499e7869 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/gettingstarted/windows7.md +++ b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/gettingstarted/windows7.md @@ -11,7 +11,7 @@ not supported with Netwrix Endpoint Policy Manager (formerly PolicyPak) installe Endpoint Policy Manager only supports versions of the operating system which are actively supported by Microsoft. This is covered in this -FAQ:[Which Windows Client and Server are currently supported by Endpoint Policy Manager?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/windows.md) +FAQ:[Which Windows Client and Server are currently supported by Endpoint Policy Manager?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/windows.md) That being said, Endpoint Policy Manager and unsupported operating systems are BEST EFFORT. diff --git a/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/knowledgebase.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/knowledgebase.md new file mode 100644 index 0000000000..a67d97d6ef --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/knowledgebase.md @@ -0,0 +1,90 @@ +--- +title: "Knowledge Base" +description: "Knowledge Base" +sidebar_position: 10 +--- + +# Knowledge Base + +The following topics can help you getting started with Endpoint Policy Manager (Misc). + +## Getting Started + +- [Endpoint Policy Manager Support and Resources](/docs/endpointpolicymanager/gettingstarted/fastest.md) +- [Does Endpoint Policy Manager have a Quick Start Guide?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/gettingstarted/guide.md) +- [Does Endpoint Policy Manager have an Installation Quick Start Guide?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/gettingstarted/guideinstall.md) +- [How has Endpoint Policy Manager Evolved over the years?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/gettingstarted/history.md) +- [How does Endpoint Policy Manager support (and not support) Windows 11?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/gettingstarted/windows11.md) +- [How does Endpoint Policy Manager support (and not support) Windows 7?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/gettingstarted/windows7.md) +- [Endpoint Policy Manager ARM Support Supportability Statement](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/gettingstarted/arm.md) +- [How does Endpoint Policy Managerhandle right-click menus in Windows 11 / Why does "Copy with Endpoint Policy Manager SecureCopy™" always show in Windows 11?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/gettingstarted/rightclick.md) +- [How must I prepare for my Endpoint Policy Manager QuickStart / Onboarding?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/gettingstarted/prepare.md) + +## Tips, Tricks, and FAQs + +- [How can use Item Level Targeting to apply a Group Policy Preferences or Endpoint Policy Manager item when the user is not a member of Domain Admins and also is not a member of the local Admin group?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/applypreferences.md) +- [Is the Security Group Item Level Targeting (ILT) option recursive or not?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/securitygroup.md) +- [Which Endpoint Policy Manager emails can / can't I opt out of ?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/emailoptout.md) +- [How can I use Item Level Targeting to specify a specific Windows 10 build and/or LTSC/LTSB?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/windows11.md) +- [How can I fix MMC display problems when my admin console uses high DPI?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/mmcdisplay.md) +- [How do I make an Item Level Target for Server 2016 or Server 2019 (on-prem, MDM or Endpoint Policy Manager Cloud) ?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/windowsserver2019.md) +- [How can I use Item Level Targeting to query Azure AD Groups?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/entraidgroups.md) +- [Can I use both Endpoint Policy ManagerOn Premise mode and Endpoint Policy Manager Cloud simultaneously? Do they clash?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/onpremisecloud.md) +- [How does Endpoint Policy Manager perform Folder Redirection or OneDrive Known Folder Move (KFM) with Endpoint Policy Manager Group Policy, Endpoint Policy ManagerMDM or Endpoint Policy Manager Cloud?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/folderredirection.md) +- [Can I embed the Endpoint Policy ManagerClient Side Extension and/or Endpoint Policy Manager Cloud client into a master image for VDI, MDT, Ghost, Citrix, etc?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/embedclient.md) +- [Which components within the Endpoint Policy Manager product family will work with what operating system?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/operatingsystem.md) +- [How do I get Azure AD SIDs and use them with Item Level Targeting?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/entraidsids.md) +- [How does Endpoint Policy Manager handle STIGs and/or CIS Benchmarks and/or other 3rd party Advice?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/thirdpartyadvice.md) +- [Are the services installed with Endpoint Policy Manager required? Can I disable them if I'm only using a single component?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/services.md) +- [Which Windows Client and Server are currently supported by Endpoint Policy Manager?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/windows.md) +- [Windows 10 (and Server) Event Logs to Azure Log Analytics Walkthru](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/eventlogs.md) +- [How can I use Item Level Targeting to specify Windows Virtual Desktops (WVD) Multi-session Windows?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/virtualdesktops.md) +- [List of Endpoint Policy Manager Event Categories and IDs](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/eventcategories.md) +- [How do I make an Item Level Target for Windows 10 or Windows 11 endpoints](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/windowsendpoint.md) + +## Portal Questions + +- [How do I create a Secondary (or Accounting) contact within the Portal to enable another person to participate in Endpoint Policy Manager (including downloads, updates, etc.)?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/portalquestions/adduser.md) +- [Two-Factor Authentication in the Endpoint Policy Manager Portal](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/portalquestions/twofactorauthentication.md) +- [Why can't I opt out of Emails when I'm an Endpoint Policy Manager Customer?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/portalquestions/emailoptout.md) +- [How can I use a checksum to validate the Endpoint Policy Manager download?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/portalquestions/cheksum.md) +- [Portal login troubleshooting](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/portalquestions/login.md) +- [Changing a portal users information](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/portalquestions/profileupdate.md) + +## Troubleshooting (General) + +- [What must I send to Endpoint Policy Manager support in order to get the FASTEST support?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/fastsupport.md) +- [Why does my mail anti-virus service claim that the Endpoint Policy Manager download ISO or ZIP has a virus?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/antivirus.md) +- [During CSE installation on a VM the following message is displayed indicating a reboot will be needed](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/clientsideextension.md) +- [What is the processing order of all policies and how are conflicts resolved (and how can I see the final RsOP) of those policies (between GPO, Cloud, XML, etc)?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/conflictresolved.md) +- [Why do I get ">Endpoint Policy ManagerBrowser Router couldn't connect to Endpoint Policy Manager extension service. Please contact support"?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/browserrouter.md) +- [How do I submit a process dump (PROCDUMP) and Process Monitor (PROCMON) capture of a hanging process?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/hangingprocess.md) +- [How do I manually collect logs if PPLOGS as User or Admin does not launch?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/manual.md) +- [How do I ensure that settings will revert when the policy no longer applies (by Group Policy, File, or Endpoint Policy Manager Cloud)?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/settingsrevert.md) +- [What are the services installed by Endpoint Policy Manager?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/services.md) +- [I see many instances of the Endpoint Policy Manager Watcher service running on my clients, is that normal?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/watcherservice.md) +- [What CSEs are contained within Endpoint Policy Manager, what are their CSE GUIDs, and in what release did they appear?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/guids.md) +- [How do I turn on Debug logging if asked?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/debug.md) +- [How do I turn on Item Level Targeting (ILT) logging if asked by Endpoint Policy Manager Tech Support?](/docs/endpointpolicymanager/deliverymethods/grouppolicy/knowledgebase/troubleshooting/preferences.md) +- [How can I increase the depth of what Endpoint Policy Manager reports (minidump files).](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/minidumpfiles.md) +- [What are the advanced CSE troubleshooting registry debugging items?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/registrydebug.md) +- [How can I present a custom dialog (or no dialog) if Browser Router (or the CSE) stops working or crashes?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/customdialog.md) +- [Troubleshooting Item Level Targeting (ILT) Evaluations when using the Endpoint Policy Manager ILT Engine](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/evaluations.md) +- [How to use ProcMon to track changes over time to specific registry keys](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/procmon.md) +- [How can I use Powershell to automatically say yes to the PPLOGS prompt?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/pplogsprompt.md) +- [Why do I get crashes and blue screens when using Endpoint Policy Manager with Forcepoint DLP?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/forepointdlp.md) + +## Endpoint Policy Manager & Netwrix Auditor + +- [How do I configure the MMC snap-in to open GPOs in Netwrix Auditor?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/netwrixauditor/mmcsnapin.md) +- [How can I minimize or eliminate requests to authenticate to Netwrix Auditor (and what permissions are needed to see Endpoint Policy Manager's Netwrix Auditor Reports?)](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/netwrixauditor/permissions.md) + +## Non-Domain Joined Troubleshooting + +- [Which Endpoint Policy Manager items will not work when the computer is non-domain joined (or the computer is NEVER connected to the Internet)?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/nondomainjoined/limitations.md) +- [Which items in Chrome will, and will not work when non-domain joined?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/nondomainjoined/chrome.md) +- [How to use Scripts Manager to manually install and enable Endpoint Policy Manager Browser Router for new Edge Chromium?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/nondomainjoined/edge.md) + +## Endpoint Policy Manager & Change Management Utilities + +- [Understanding the Difference Between Endpoint Policy Manager and GPO Change Management Tools](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/changemanagementutilities/changemanagementtools.md) diff --git a/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/netwrixauditor/_category_.json b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/netwrixauditor/_category_.json new file mode 100644 index 0000000000..704ff428b6 --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/netwrixauditor/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Endpoint Policy Manager And Netwrix Auditor", + "position": 50, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/netwrixauditor/mmcsnapin.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/netwrixauditor/mmcsnapin.md similarity index 94% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/netwrixauditor/mmcsnapin.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/netwrixauditor/mmcsnapin.md index 6c7a09cd4c..feea3b4a37 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/netwrixauditor/mmcsnapin.md +++ b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/netwrixauditor/mmcsnapin.md @@ -7,7 +7,7 @@ sidebar_position: 10 # How do I configure the MMC snap-in to open GPOs in Netwrix Auditor? For a video overview of this process see -[Endpoint Policy Manager and Netwrix Auditor - Setup Steps](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/netwrixauditor/auditorsetup.md) +[Endpoint Policy Manager and Netwrix Auditor - Setup Steps](/docs/endpointpolicymanager/gettingstarted/misc/videos/netwrixauditor/auditorsetup.md) :::note Only the latest Endpoint Policy Manager MMC console supports the Endpoint Policy Manager → @@ -65,7 +65,7 @@ wish to mass-configure this value, you may do so via the Endpoint Policy Manager Always use the latest Endpoint Policy Manager ` ADMX` files, are available in the Endpoint Policy Manager download. -Please see [Troubleshooting with ADMX files](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/admxfiles.md) to begin +Please see [Troubleshooting with ADMX files](/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/admxfiles.md) to begin using, or update the Endpoint Policy Manager ADMX settings **Step 2 –** After the ` ADMX` files are in place, create a Group Policy Object and target it for diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/netwrixauditor/permissions.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/netwrixauditor/permissions.md similarity index 95% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/netwrixauditor/permissions.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/netwrixauditor/permissions.md index 3d9b57e851..6678c5315d 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/netwrixauditor/permissions.md +++ b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/netwrixauditor/permissions.md @@ -16,7 +16,7 @@ to do to minimize or eliminate these requests. An example authentication request First, note that if your browser is Firefox you must set the "URIS / SPNEGO" settings to passthru authentication requests. One way to do this is via Endpoint Policy Manager Application Settings Manager with these instructions: -[Firefox: How do I use the NTLM passthru (URIS) settings in the Firefox / about:config AppSets?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/ntlmpassthru.md). +[Firefox: How do I use the NTLM passthru (URIS) settings in the Firefox / about:config AppSets?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/ntlmpassthru.md). You may also use the Firefox ADMX settings to perform a similar option. ::: diff --git a/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/nondomainjoined/_category_.json b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/nondomainjoined/_category_.json new file mode 100644 index 0000000000..c48c4157c9 --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/nondomainjoined/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Non Domain Joined Troubleshooting", + "position": 60, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/nondomainjoined/chrome.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/nondomainjoined/chrome.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/nondomainjoined/chrome.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/nondomainjoined/chrome.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/nondomainjoined/edge.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/nondomainjoined/edge.md similarity index 98% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/nondomainjoined/edge.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/nondomainjoined/edge.md index 7458e11379..e92a834760 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/nondomainjoined/edge.md +++ b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/nondomainjoined/edge.md @@ -44,7 +44,7 @@ Steps: ![856_2_image-20211130230540-2_950x436](/images/endpointpolicymanager/troubleshooting/nondomain/856_2_image-20211130230540-2_950x436.webp) \*\*\*\*\* PowerShell Script to apply using Scripts Manager: Scripts & Triggers Manager > -[Knowledge Base](/docs/endpointpolicymanager/knowledgebase/knowledgebase.md) +[Knowledge Base](/docs/endpointpolicymanager/) ``` #Download the latest PPBR extension from shareFile/PolicyPak Support - Inbox/ppbr_crx/ppbr_21_2_0_0.crx diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/nondomainjoined/limitations.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/nondomainjoined/limitations.md similarity index 91% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/nondomainjoined/limitations.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/nondomainjoined/limitations.md index 37fd141d69..650843e2f5 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/nondomainjoined/limitations.md +++ b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/nondomainjoined/limitations.md @@ -25,11 +25,11 @@ There are some items which will not work if the computer is not domain joined… 1. Chrome's plug SHOULD work and activate automatically, but in might need to be activated if it doesn't operate as expected. - [Browser Router now supports Chrome on Non-Domain Joined machines](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/chromenondomainjoined.md). + [Browser Router now supports Chrome on Non-Domain Joined machines](/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/tipsandtricks/chromenondomainjoined.md). 2. Endpoint Policy Manager Application Manager will work as expected, except managing some areas of CHROME when non-domain joined. Chrome simply has a self-imposed limitation for non-domain joined machines. The list of settings which WILL and WON'T work is documented - [Which items in Chrome will, and will not work when non-domain joined?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/nondomainjoined/chrome.md). + [Which items in Chrome will, and will not work when non-domain joined?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/nondomainjoined/chrome.md). 3. Windows Edge (original) will report at each launch "We've turned off extensions from unknown sources. They might be risky so we recommend keeping them off." (See picture below.) There is NO workaround at this time. diff --git a/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/portalquestions/_category_.json b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/portalquestions/_category_.json new file mode 100644 index 0000000000..b90c962c2d --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/portalquestions/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Portal Questions", + "position": 30, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/portalquestions/adduser.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/portalquestions/adduser.md similarity index 94% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/portalquestions/adduser.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/portalquestions/adduser.md index 419a12c3cc..99b2181c01 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/portalquestions/adduser.md +++ b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/portalquestions/adduser.md @@ -9,7 +9,7 @@ sidebar_position: 10 :::note This article pertains to portal.endpointpolicymanager.com.  If you need to manage users in the Netwrix Endpoint Policy Manager (formerly PolicyPak) Cloud Portal (cloud.endpointpolicymanager.com) -see [Endpoint Policy Manager Cloud: Adding New Admins](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/security/administrator.md) +see [Endpoint Policy Manager Cloud: Adding New Admins](/docs/endpointpolicymanager/deliverymethods/cloud/videos/security/administrator.md) ::: diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/portalquestions/cheksum.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/portalquestions/cheksum.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/portalquestions/cheksum.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/portalquestions/cheksum.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/portalquestions/emailoptout.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/portalquestions/emailoptout.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/portalquestions/emailoptout.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/portalquestions/emailoptout.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/portalquestions/login.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/portalquestions/login.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/portalquestions/login.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/portalquestions/login.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/portalquestions/profileupdate.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/portalquestions/profileupdate.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/portalquestions/profileupdate.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/portalquestions/profileupdate.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/portalquestions/twofactorauthentication.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/portalquestions/twofactorauthentication.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/portalquestions/twofactorauthentication.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/portalquestions/twofactorauthentication.md diff --git a/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/_category_.json b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/_category_.json new file mode 100644 index 0000000000..54d8242ddf --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Tips Tricks and FAQs", + "position": 20, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/applypreferences.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/applypreferences.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/applypreferences.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/applypreferences.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/emailoptout.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/emailoptout.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/emailoptout.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/emailoptout.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/embedclient.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/embedclient.md similarity index 90% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/embedclient.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/embedclient.md index 681e63cfba..212d9f7250 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/embedclient.md +++ b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/embedclient.md @@ -20,7 +20,7 @@ improvements and fixes. - If you are using VDI, you will have to keep the master image updated from time to time. - If you're using standard machines you will have to use SCCM, PDQ Deploy, or Netwrix Endpoint Policy Manager (formerly PolicyPak)'s own auto-updater mechanism. You can see this in action in - this video ([Auto-updating the CSE](/docs/endpointpolicymanager/knowledgebase/installation/videolearningcenter/methodgpoandad/autoupdate.md)) and read more about it in + this video ([Auto-updating the CSE](/docs/endpointpolicymanager/installation/videolearningcenter/methodgpoandad/autoupdate.md)) and read more about it in Appendix Book A in the Endpoint Policy Manager Manuals. ## For Endpoint Policy Manager Cloud Edition: @@ -30,7 +30,7 @@ Endpoint Policy Manager Cloud. You use your company's Endpoint Policy Manager Cl installs the Endpoint Policy Manager Cloud Client, consumes a Endpoint Policy Manager Cloud license, and then installs the latest Endpoint Policy Manager Client Side Extension (or whatever the Client Side Extension level you have set the GROUP membership to, as explained in this video: -[Endpoint Policy Manager Cloud Groups CSE and Cloud Client Small-Scale Testing and Updates](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/groups.md)) +[Endpoint Policy Manager Cloud Groups CSE and Cloud Client Small-Scale Testing and Updates](/docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/groups.md)) You cannot pre-install the Endpoint Policy Manager Cloud client, because future machines based upon the image will get confused and NOT consume a new license from Endpoint Policy Manager Cloud. @@ -61,9 +61,9 @@ have it work. If you want to use Endpoint Policy Manager with VDI, you must foll of the knowledgebase articles directly below, or use the Endpoint Policy Manager Group Policy Edition and license an on-prem domain / OU. -[How to install the Endpoint Policy Manager Cloud Client for use in an Azure Virtual Desktop image](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/azurevirutaldesktop.md) +[How to install the Endpoint Policy Manager Cloud Client for use in an Azure Virtual Desktop image](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/azurevirutaldesktop.md) -[How to install and configure the PPC Client for a Non-Persistent VDI Image in VMware Horizon](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/vdisolutions.md) +[How to install and configure the PPC Client for a Non-Persistent VDI Image in VMware Horizon](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/vdisolutions.md) While it will technically work, you are expressly forbidden by the EULA to attempt to install the Endpoint Policy Manager Cloud client (which will install the Endpoint Policy Manager Client Side diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/entraidgroups.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/entraidgroups.md similarity index 84% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/entraidgroups.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/entraidgroups.md index bbc66e5afd..02422263bd 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/entraidgroups.md +++ b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/entraidgroups.md @@ -10,7 +10,7 @@ You cannot do this directly. However, we have a set of unsupported scripts which this. We have videos for each scenario, which can be found here: Getting Started with MDM > -[Video Learning Center](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/videolearningcenter.md) We recommend you watch all three +[Video Learning Center](/docs/endpointpolicymanager/deliverymethods/mdm/videos/videolearningcenter.md) We recommend you watch all three videos 1. Using Netwrix Endpoint Policy Manager (formerly PolicyPak) Scripts to determine Azure AD Group diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/entraidsids.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/entraidsids.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/entraidsids.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/entraidsids.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/eventcategories.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/eventcategories.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/eventcategories.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/eventcategories.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/eventlogs.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/eventlogs.md similarity index 98% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/eventlogs.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/eventlogs.md index 06bf45b853..3a3a6f5033 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/eventlogs.md +++ b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/eventlogs.md @@ -13,9 +13,9 @@ event logs, and maybe you already know about on-prem Event Forwarding. :::note If you want to learn more about on-prem Event Forwarding, you can see my Walkthrough of that here -[Using Windows Event Forwarding to search for interesting events](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/windowseventforwarding.md) +[Using Windows Event Forwarding to search for interesting events](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/eventing/windowseventforwarding.md) and -[How to forward interesting events for Least Privilege Manager (or anything else) to a centralized location using Windows Event Forwarding.](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/eventing/windowseventforwarding.md). +[How to forward interesting events for Least Privilege Manager (or anything else) to a centralized location using Windows Event Forwarding.](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/eventing/windowseventforwarding.md). ::: @@ -86,7 +86,7 @@ blog [https://www.mdmandgpanswers.com/blogs/view-blog/windows-10-and-server-eve **Step 4 –** Then, Up, Up and away. Launch the agent.. which requires admin rights. (Or, pro tip: Use Endpoint Policy Manager Scripts to install it automatically where the script is -elevated.[Endpoint Policy ManagerScripts .. Deploy Software via VPN or with Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/withcloud/cloud.md) +elevated.[Endpoint Policy ManagerScripts .. Deploy Software via VPN or with Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/withcloud/cloud.md) **Step 5 –** You'll need to select "Connect the agent to Azure Log Analytics (OMS)" like what's seen here. diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/folderredirection.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/folderredirection.md similarity index 97% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/folderredirection.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/folderredirection.md index 94c96852d2..7df367d8b3 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/folderredirection.md +++ b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/folderredirection.md @@ -93,7 +93,7 @@ Video tip for adding ADMX files to your Central Store: [https://www.youtube.com/watch?v=Op7hAvc5a0M](https://www.youtube.com/watch?v=Op7hAvc5a0M) Video tip for adding ADMX files to your Endpoint Policy Manager -Cloud:[Endpoint Policy ManagerCloud: Upload and use your own ADMX files to Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/admxfiles.md) +Cloud:[Endpoint Policy ManagerCloud: Upload and use your own ADMX files to Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/admxfiles.md) The policy settings you might want to use are… diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/mmcdisplay.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/mmcdisplay.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/mmcdisplay.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/mmcdisplay.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/onpremisecloud.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/onpremisecloud.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/onpremisecloud.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/onpremisecloud.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/operatingsystem.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/operatingsystem.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/operatingsystem.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/operatingsystem.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/securitygroup.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/securitygroup.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/securitygroup.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/securitygroup.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/services.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/services.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/services.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/services.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/syspreperror.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/syspreperror.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/syspreperror.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/syspreperror.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/thirdpartyadvice.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/thirdpartyadvice.md similarity index 88% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/thirdpartyadvice.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/thirdpartyadvice.md index 6d72f9376b..e0a99633bd 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/thirdpartyadvice.md +++ b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/thirdpartyadvice.md @@ -25,12 +25,12 @@ Manager format, so we only convert the ones that make sense. ![539_1_image-20200219201318-1_950x682](/images/endpointpolicymanager/tips/539_1_image-20200219201318-1_950x682.webp) You can investigate this whole process end-to-end by watching -[Import STIG files to make your applications more secure](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/using/importstig.md) +[Import STIG files to make your applications more secure](/docs/endpointpolicymanager/gpcompliancereporter/videos/using/importstig.md) on how to consume the converted STIG information: Then, you can also use Endpoint Policy Manager Group Policy Compliance Reporter (Free version) to verify that your settings delivered via Endpoint Policy Manager Application Manager were delivered -correctly.[Endpoint Policy Manager GP Compliance Reporter: Using an Existing GPO as a test](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/using/existinggpos.md) +correctly.[Endpoint Policy Manager GP Compliance Reporter: Using an Existing GPO as a test](/docs/endpointpolicymanager/gpcompliancereporter/videos/using/existinggpos.md) on that process. As already explained though, STIG conversion from its downloadable form from the DoD into Endpoint @@ -91,7 +91,7 @@ see if those settings actually applied. **Step 1 –** Use the Endpoint Policy Manager Merge Utility to locate CIS Benchmark GPOs with ADMX settings, and converting them to Endpoint Policy Manager Admin Templates Manager format. -([Reduce GPOs (and/or export them for use with Endpoint Policy Manager Cloud or with MDM)](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/admintemplatesmethods/reducegpos.md)) +([Reduce GPOs (and/or export them for use with Endpoint Policy Manager Cloud or with MDM)](/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/admintemplatesmethods/reducegpos.md)) **Step 2 –** Once in Endpoint Policy Manager Admin Templates Manager format, use the Endpoint Policy Manager Group Policy Compliance Reporter (Free Version) to report on those converted settings. @@ -106,11 +106,11 @@ specific Users or Groups, on specific IP addresses, etc etc.). **Step 1 –** Use the Endpoint Policy Manager Merge Utility to locate CIS Benchmark GPOs with ADMX settings, and converting them to Endpoint Policy Manager Admin Templates Manager format. -([Reduce GPOs (and/or export them for use with Endpoint Policy Manager Cloud or with MDM)](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/admintemplatesmethods/reducegpos.md)) +([Reduce GPOs (and/or export them for use with Endpoint Policy Manager Cloud or with MDM)](/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/admintemplatesmethods/reducegpos.md)) **Step 2 –** Once in Endpoint Policy Manager Admin Templates Manager format, take advantage of Item Level Targeting to specifically dictate where settings should be used -([Endpoint Policy Manager Admin Templates: Collections and Item Level Targeting](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/admintemplatesmanager/collections.md)) +([Endpoint Policy Manager Admin Templates: Collections and Item Level Targeting](/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/admintemplatesmanager/collections.md)) ### Endpoint Policy Manager + CIS Benchmarks Item #4: Export CIS Benchmarks for use with Endpoint Policy Manager Cloud or Endpoint Policy Manager MDM (for domain joined or non-domain joined machines.) @@ -129,9 +129,9 @@ MDM. The basics for how to take existing Group Policy settings (from CIS Benchmarks or any source) and use with Endpoint Policy Manager Cloud -[Endpoint Policy ManagerCloud: How to deploy Microsoft Group Policy Settings using Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/grouppolicysettings.md). +[Endpoint Policy ManagerCloud: How to deploy Microsoft Group Policy Settings using Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/grouppolicysettings.md). The basics for how to take existing Group Policy settings (from CIS Benchmarks or any source) and use with Endpoint Policy Manager MDM can be found -[Reduce GPOs (and/or export them for use with Endpoint Policy Manager Cloud or with MDM)](/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/tipsandtricks/exportgpos.md) -and [Endpoint Policy Manager and Microsoft Intune](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/gettingstarted/microsoftintune.md). +[Reduce GPOs (and/or export them for use with Endpoint Policy Manager Cloud or with MDM)](/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/tipsandtricks/exportgpos.md) +and [Endpoint Policy Manager and Microsoft Intune](/docs/endpointpolicymanager/deliverymethods/mdm/videos/gettingstarted/microsoftintune.md). diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/uninstallpassword.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/uninstallpassword.md similarity index 98% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/uninstallpassword.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/uninstallpassword.md index 72839f972a..fd93db506f 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/uninstallpassword.md +++ b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/uninstallpassword.md @@ -135,7 +135,7 @@ recognize it on a different system. As an emergency method of uninstallation, you may use the Endpoint Policy Manager ADMX Troubleshooting files which contains a policy named “Force disable uninstall password”. -See the [Troubleshooting with ADMX files](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/admxfiles.md) topic for +See the [Troubleshooting with ADMX files](/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/admxfiles.md) topic for additional information about the ADMX troubleshooting files. When this ADMX setting is set locally or targeted to a machine, the CSE will uninstall without a diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/virtualdesktops.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/virtualdesktops.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/virtualdesktops.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/virtualdesktops.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/windows.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/windows.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/windows.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/windows.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/windows11.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/windows11.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/windows11.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/windows11.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/windowsendpoint.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/windowsendpoint.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/windowsendpoint.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/windowsendpoint.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/windowsserver2019.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/windowsserver2019.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/windowsserver2019.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/windowsserver2019.md diff --git a/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/_category_.json b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/_category_.json new file mode 100644 index 0000000000..697c5fe85f --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Troubleshooting General", + "position": 40, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/antivirus.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/antivirus.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/antivirus.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/antivirus.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/browserrouter.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/browserrouter.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/browserrouter.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/browserrouter.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/clientsideextension.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/clientsideextension.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/clientsideextension.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/clientsideextension.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/conflictresolved.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/conflictresolved.md similarity index 96% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/conflictresolved.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/conflictresolved.md index fdc9c4eef3..f4a7e1b13b 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/conflictresolved.md +++ b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/conflictresolved.md @@ -47,4 +47,4 @@ individual policies. As such you might see an undesired "flip flop" behavior whe Security Settings are delivered from multiple sources like Group Policy and Endpoint Policy Manager Cloud. For details on this particular problem see this existing KB: -[Why do I sometimes see Endpoint Policy Manager Cloud security settings and sometimes see on-prem GPO security settings?](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicysecurity/onpremisecloud.md) +[Why do I sometimes see Endpoint Policy Manager Cloud security settings and sometimes see on-prem GPO security settings?](/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicysecurity/onpremisecloud.md) diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/customdialog.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/customdialog.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/customdialog.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/customdialog.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/debug.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/debug.md similarity index 90% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/debug.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/debug.md index 8d69795754..b84830a8cc 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/debug.md +++ b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/debug.md @@ -28,5 +28,5 @@ correctly. ![385_2_image003](/images/endpointpolicymanager/troubleshooting/log/385_2_image003.webp) **Step 4 –** After that, reproduce the problem, and run` PPLOGS` as seen in Step 3 -[What must I send to Endpoint Policy Manager support in order to get the FASTEST support?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/fastsupport.md) +[What must I send to Endpoint Policy Manager support in order to get the FASTEST support?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/fastsupport.md) and attach to your support case. diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/evaluations.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/evaluations.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/evaluations.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/evaluations.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/fastsupport.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/fastsupport.md similarity index 90% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/fastsupport.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/fastsupport.md index 00276521be..a94c8bc145 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/fastsupport.md +++ b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/fastsupport.md @@ -12,7 +12,7 @@ Follow theses steps in order for support to troubleshoot most issues. concerns and issues on the latest CSE. If you haven’t verified your problem exists with the latest CSE (and latest MMC or with Cloud), ensure to download the latest CSE before opening a support ticket. See the -[Using Rings to Test and Update the Endpoint Policy Manager Client-Side Extension and/or Cloud Client (And How to Stay Supported)](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/bestpractices/rings.md) +[Using Rings to Test and Update the Endpoint Policy Manager Client-Side Extension and/or Cloud Client (And How to Stay Supported)](/docs/endpointpolicymanager/upgrademaintenance/bestpractices/rings.md) topic for additional information. **Step 2 –** After the problem is reproduced on the latest CSE, open a @@ -33,7 +33,7 @@ the problem statement: :::warning Support cannot assist without the correctly generated logs. See the -[Gathering and Uploading Logs](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/logs.md) topic on how to gather logs +[Gathering and Uploading Logs](/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/logs.md) topic on how to gather logs properly and use the ticket ID generated in Step 2. ::: @@ -41,7 +41,7 @@ properly and use the ticket ID generated in Step 2. ## Gathering and Uploading Logs This section provides a summary of the steps for gathering and uploading logs. See the -[Gathering and Uploading Logs](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/logs.md) topic for additional information. +[Gathering and Uploading Logs](/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/logs.md) topic for additional information. :::note If you do not see the GUI version of pplogs, you are not using the latest CSE. Endpoint @@ -106,7 +106,7 @@ Follow theses steps in order for support to troubleshoot most issues. :::warning Support cannot assist without the correctly generated logs. See the -[Gathering and Uploading Logs](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/logs.md) topic on how to gather logs +[Gathering and Uploading Logs](/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/logs.md) topic on how to gather logs properly. ::: @@ -114,7 +114,7 @@ properly. ## Gathering and Uploading Logs This section provides a summary of the steps for gathering and uploading logs. See the -[Gathering and Uploading Logs](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/logs.md) topic for additional information. +[Gathering and Uploading Logs](/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/logs.md) topic for additional information. **Step 1 –** On an affected endpoint, run `PPLogs` twice. diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/forepointdlp.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/forepointdlp.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/forepointdlp.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/forepointdlp.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/guids.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/guids.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/guids.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/guids.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/hangingprocess.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/hangingprocess.md similarity index 94% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/hangingprocess.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/hangingprocess.md index 9e31b878b1..cf80130487 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/hangingprocess.md +++ b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/hangingprocess.md @@ -17,7 +17,7 @@ Get the following tools handy: :::note You can pre-watch this video on PROCMON here: -[Process Monitor 101](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/processmonitor.md) +[Process Monitor 101](/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/processmonitor.md) ::: diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/intelgraphicdriver.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/intelgraphicdriver.md similarity index 98% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/intelgraphicdriver.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/intelgraphicdriver.md index bc906c8e6d..0f3e6fcdd4 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/intelgraphicdriver.md +++ b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/intelgraphicdriver.md @@ -23,7 +23,7 @@ not show a UAC prompt, which is needed for the update to install. Resolution 1 See the Scenario 2 section of the -[How can I change the behavior of "Run as Admin" with Endpoint Privilege Manager and how has it changed from previous versions?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipspplpm/runasadmin.md) +[How can I change the behavior of "Run as Admin" with Endpoint Privilege Manager and how has it changed from previous versions?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipspplpm/runasadmin.md) topic for additional information on how to disable the Explicit Elevate option. Resolution 2 diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/manual.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/manual.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/manual.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/manual.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/minidumpfiles.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/minidumpfiles.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/minidumpfiles.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/minidumpfiles.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/pplogsprompt.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/pplogsprompt.md similarity index 89% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/pplogsprompt.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/pplogsprompt.md index 674f80bb80..bc8173fa03 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/pplogsprompt.md +++ b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/pplogsprompt.md @@ -8,7 +8,7 @@ sidebar_position: 180 Remember that two different logs are required to get on a computer in order to get Netwrix Endpoint Policy Manager (formerly PolicyPak) Support. Please review -[What must I send to Endpoint Policy Manager support in order to get the FASTEST support?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/fastsupport.md). +[What must I send to Endpoint Policy Manager support in order to get the FASTEST support?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/fastsupport.md). Then, when you're ready to automatically grab the logs from the machine please use the following commands (and see a sample result below.) diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/procmon.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/procmon.md similarity index 98% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/procmon.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/procmon.md index d0ce89fafb..cec36d4050 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/procmon.md +++ b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/procmon.md @@ -77,4 +77,4 @@ on SHAREFILE: And remember to click the UPLOAD button! -Video KB:[Gathering and Uploading Logs](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/logs.md) +Video KB:[Gathering and Uploading Logs](/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/logs.md) diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/registrydebug.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/registrydebug.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/registrydebug.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/registrydebug.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/services.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/services.md similarity index 97% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/services.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/services.md index 5c005418d4..9a0a8e221b 100644 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/services.md +++ b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/services.md @@ -45,7 +45,7 @@ We need three services because we support both 32 & 64 bit applications (on 64-b The Watcher Service is also involved in the PolicyPak CSE Auto-Updater. When the Watcher Service is disabled, you cannot perform the automatic on-prem update of the CSE. For more information on the automatic update feature, see the -[Rings with Endpoint Policy Manager and Active Directory](/docs/endpointpolicymanager/manuals/introductionandquick/upgrade/rings/activedirectory.md) topic. +[Rings with Endpoint Policy Manager and Active Directory](/docs/endpointpolicymanager/upgrademaintenance/upgrade/rings/activedirectory.md) topic. The Helper Service is required, handles a variety of functions, and is used across all of PP's components. We need more services than just Group Policy because we do much more than Group Policy diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/settingsrevert.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/settingsrevert.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/settingsrevert.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/settingsrevert.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/watcherservice.md b/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/watcherservice.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/watcherservice.md rename to docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/watcherservice.md diff --git a/docs/endpointpolicymanager/gettingstarted/misc/videos/_category_.json b/docs/endpointpolicymanager/gettingstarted/misc/videos/_category_.json new file mode 100644 index 0000000000..f5151829fd --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/misc/videos/_category_.json @@ -0,0 +1 @@ +{"label":"Videos","position":2,"collapsed":true,"collapsible":true,"link":{"type":"doc","id":"videolearningcenter"}} diff --git a/docs/endpointpolicymanager/gettingstarted/misc/videos/cameyo/_category_.json b/docs/endpointpolicymanager/gettingstarted/misc/videos/cameyo/_category_.json new file mode 100644 index 0000000000..e9a32270d4 --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/misc/videos/cameyo/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Endpoint Policy Manager and Cameyo", + "position": 80, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/cameyo/applicationsettings.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/cameyo/applicationsettings.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/cameyo/applicationsettings.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/cameyo/applicationsettings.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/cameyo/browserright.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/cameyo/browserright.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/cameyo/browserright.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/cameyo/browserright.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/cameyo/startscreen.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/cameyo/startscreen.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/cameyo/startscreen.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/cameyo/startscreen.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/cameyo/uacprompts.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/cameyo/uacprompts.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/cameyo/uacprompts.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/cameyo/uacprompts.md diff --git a/docs/endpointpolicymanager/gettingstarted/misc/videos/changemanagementutilities/_category_.json b/docs/endpointpolicymanager/gettingstarted/misc/videos/changemanagementutilities/_category_.json new file mode 100644 index 0000000000..2741f7ff3c --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/misc/videos/changemanagementutilities/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Endpoint Policy Manager and Change Management Utilities", + "position": 90, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/changemanagementutilities/advancedgrouppolicymanagement.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/changemanagementutilities/advancedgrouppolicymanagement.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/changemanagementutilities/advancedgrouppolicymanagement.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/changemanagementutilities/advancedgrouppolicymanagement.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/changemanagementutilities/gpoadmintool.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/changemanagementutilities/gpoadmintool.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/changemanagementutilities/gpoadmintool.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/changemanagementutilities/gpoadmintool.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/changemanagementutilities/history.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/changemanagementutilities/history.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/changemanagementutilities/history.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/changemanagementutilities/history.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/changemanagementutilities/netiq.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/changemanagementutilities/netiq.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/changemanagementutilities/netiq.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/changemanagementutilities/netiq.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/changemanagementutilities/scriptlogicactiveadministrator.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/changemanagementutilities/scriptlogicactiveadministrator.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/changemanagementutilities/scriptlogicactiveadministrator.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/changemanagementutilities/scriptlogicactiveadministrator.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/changemanagementutilities/sdmchangemanager.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/changemanagementutilities/sdmchangemanager.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/changemanagementutilities/sdmchangemanager.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/changemanagementutilities/sdmchangemanager.md diff --git a/docs/endpointpolicymanager/gettingstarted/misc/videos/fslogix/_category_.json b/docs/endpointpolicymanager/gettingstarted/misc/videos/fslogix/_category_.json new file mode 100644 index 0000000000..d68ff00f59 --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/misc/videos/fslogix/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Endpoint Policy Manager and FSLogix", + "position": 70, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/fslogix/appmasking.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/fslogix/appmasking.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/fslogix/appmasking.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/fslogix/appmasking.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/fslogix/broswerright.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/fslogix/broswerright.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/fslogix/broswerright.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/fslogix/broswerright.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/fslogix/browserconfiguration.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/fslogix/browserconfiguration.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/fslogix/browserconfiguration.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/fslogix/browserconfiguration.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/fslogix/browserdefault.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/fslogix/browserdefault.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/fslogix/browserdefault.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/fslogix/browserdefault.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/fslogix/elevatingapplications.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/fslogix/elevatingapplications.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/fslogix/elevatingapplications.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/fslogix/elevatingapplications.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/fslogix/profiles.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/fslogix/profiles.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/fslogix/profiles.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/fslogix/profiles.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/fslogix/startmenu.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/fslogix/startmenu.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/fslogix/startmenu.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/fslogix/startmenu.md diff --git a/docs/endpointpolicymanager/gettingstarted/misc/videos/gettingstartedmisc/_category_.json b/docs/endpointpolicymanager/gettingstarted/misc/videos/gettingstartedmisc/_category_.json new file mode 100644 index 0000000000..7f108a598c --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/misc/videos/gettingstartedmisc/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Getting Started (Misc)", + "position": 10, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/gettingstartedmisc/arm.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/gettingstartedmisc/arm.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/gettingstartedmisc/arm.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/gettingstartedmisc/arm.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/gettingstartedmisc/editor.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/gettingstartedmisc/editor.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/gettingstartedmisc/editor.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/gettingstartedmisc/editor.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/gettingstartedmisc/freetraining.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/gettingstartedmisc/freetraining.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/gettingstartedmisc/freetraining.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/gettingstartedmisc/freetraining.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/gettingstartedmisc/sidexporter.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/gettingstartedmisc/sidexporter.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/gettingstartedmisc/sidexporter.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/gettingstartedmisc/sidexporter.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/gettingstartedmisc/solutionmethods.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/gettingstartedmisc/solutionmethods.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/gettingstartedmisc/solutionmethods.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/gettingstartedmisc/solutionmethods.md diff --git a/docs/endpointpolicymanager/gettingstarted/misc/videos/methods/_category_.json b/docs/endpointpolicymanager/gettingstarted/misc/videos/methods/_category_.json new file mode 100644 index 0000000000..be32e15c43 --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/misc/videos/methods/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Methods SCCM And Other On Prem Tools Deploying Real Microsoft GPO And Endpoint Policy Manager Settings", + "position": 50, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/methods/exporterutility.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/methods/exporterutility.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/methods/exporterutility.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/methods/exporterutility.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/methods/sccmendpointpolicymanager.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/methods/sccmendpointpolicymanager.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/methods/sccmendpointpolicymanager.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/methods/sccmendpointpolicymanager.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/methods/sccmgrouppolicy.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/methods/sccmgrouppolicy.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/methods/sccmgrouppolicy.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/methods/sccmgrouppolicy.md diff --git a/docs/endpointpolicymanager/gettingstarted/misc/videos/netwrixauditor/_category_.json b/docs/endpointpolicymanager/gettingstarted/misc/videos/netwrixauditor/_category_.json new file mode 100644 index 0000000000..07d5677b41 --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/misc/videos/netwrixauditor/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Endpoint Policy Manager And Netwrix Auditor", + "position": 40, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/netwrixauditor/auditordemo.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/netwrixauditor/auditordemo.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/netwrixauditor/auditordemo.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/netwrixauditor/auditordemo.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/netwrixauditor/auditorsetup.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/netwrixauditor/auditorsetup.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/netwrixauditor/auditorsetup.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/netwrixauditor/auditorsetup.md diff --git a/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/_category_.json b/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/_category_.json new file mode 100644 index 0000000000..289c6f8855 --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Troubleshooting", + "position": 20, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/admx.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/admx.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/admx.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/admx.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/admxfiles.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/admxfiles.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/admxfiles.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/admxfiles.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/gpobackup.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/gpobackup.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/gpobackup.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/gpobackup.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/itemleveltargeting.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/itemleveltargeting.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/itemleveltargeting.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/itemleveltargeting.md diff --git a/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/logs.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/logs.md new file mode 100644 index 0000000000..a0a2bff990 --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/logs.md @@ -0,0 +1,22 @@ +--- +title: "Gathering and Uploading Logs" +description: "Gathering and Uploading Logs" +sidebar_position: 20 +--- + +# Gathering and Uploading Logs + +If you are experiencing issues with Netwrix Endpoint Policy Manager (formerly PolicyPak), the first +step is to collect logs for support to review. Follow the steps in this video to correctly gather +logs of the issue so support can troubleshoot it quickly. + + + +See the +[What must I send to Endpoint Policy Manager support in order to get the FASTEST support?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/fastsupport.md) +topic for additional information on current support policies and how to get the fastest support. + +## Troubleshooting Previous Versions of Endpoint Policy Manager + +Use this video for gathering and uploading logs for versions previous to Endpoint Policy Manager +v25.4. diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/mdm.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/mdm.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/mdm.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/mdm.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/powershell.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/powershell.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/powershell.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/powershell.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/processmonitor.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/processmonitor.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/processmonitor.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/processmonitor.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/unlicense.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/unlicense.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/unlicense.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/unlicense.md diff --git a/docs/endpointpolicymanager/gettingstarted/misc/videos/upgradingmaintenance/_category_.json b/docs/endpointpolicymanager/gettingstarted/misc/videos/upgradingmaintenance/_category_.json new file mode 100644 index 0000000000..e1e400b680 --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/misc/videos/upgradingmaintenance/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Upgrading and Maintenance", + "position": 30, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/upgradingmaintenance/backup.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/upgradingmaintenance/backup.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/upgradingmaintenance/backup.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/upgradingmaintenance/backup.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/upgradingmaintenance/backupoptions.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/upgradingmaintenance/backupoptions.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/upgradingmaintenance/backupoptions.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/upgradingmaintenance/backupoptions.md diff --git a/docs/endpointpolicymanager/gettingstarted/misc/videos/videolearningcenter.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/videolearningcenter.md new file mode 100644 index 0000000000..b2de90ffe7 --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/misc/videos/videolearningcenter.md @@ -0,0 +1,82 @@ +--- +title: "Video Learning Center" +description: "Video Learning Center" +sidebar_position: 20 +--- + +# Video Learning Center + +See the following Video topics for getting started with Endpoint Policy Manager (Misc). + +## Getting Started (Misc) + +- [Endpoint Policy ManagerPortal: How to download Endpoint Policy Manager and get free training](/docs/endpointpolicymanager/gettingstarted/misc/videos/gettingstartedmisc/freetraining.md) +- [Endpoint Policy ManagerSolution Methods: Group Policy, MDM, UEM Tools, and Endpoint Policy Manager Cloud compared.](/docs/endpointpolicymanager/gettingstarted/misc/videos/gettingstartedmisc/solutionmethods.md) +- [Endpoint Policy Manager Extras: SID EXPORTER](/docs/endpointpolicymanager/gettingstarted/misc/videos/gettingstartedmisc/sidexporter.md) +- [Endpoint Policy Manager CSE and Admin console with ARM machines](/docs/endpointpolicymanager/gettingstarted/misc/videos/gettingstartedmisc/arm.md) +- [Endpoint Policy Manager Standalone Editor Introduction](/docs/endpointpolicymanager/gettingstarted/misc/videos/gettingstartedmisc/editor.md) + +## Troubleshooting + +- [Troubleshooting with ADMX files](/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/admxfiles.md) +- [Gathering and Uploading Logs](/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/logs.md) +- [Process Monitor 101](/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/processmonitor.md) +- [How to make a GPO backup for us to use atEndpoint Policy Manager ](/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/gpobackup.md) +- [Endpoint Policy Manager User PowerShell to find all Endpoint Policy Manager GPOs](/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/powershell.md) +- [Endpoint Policy Manager CSE Troubleshooting: Unlicense all components, and re-license the one to isolate](/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/unlicense.md) +- [Troubleshooting ILT with the ILT Validator Tool](/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/itemleveltargeting.md) +- [Endpoint Policy Manager: Exclude Processes via ADMX](/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/admx.md) + +## Upgrading and Maintenance + +- [Endpoint Policy Manager: Backup and Restore Options to Recover from nearly any problem](/docs/endpointpolicymanager/gettingstarted/misc/videos/upgradingmaintenance/backupoptions.md) +- [Endpoint Policy Manager Application Settings Manager: Backup, Restore, Export, Import](/docs/endpointpolicymanager/gettingstarted/misc/videos/upgradingmaintenance/backup.md) + +## Endpoint Policy Manager & Netwrix Auditor + +- [Endpoint Policy Manager and Netwrix Auditor - Demo](/docs/endpointpolicymanager/gettingstarted/misc/videos/netwrixauditor/auditordemo.md) +- [Endpoint Policy Manager and Netwrix Auditor - Setup Steps](/docs/endpointpolicymanager/gettingstarted/misc/videos/netwrixauditor/auditorsetup.md) + +## Methods: SCCM (and Other On-prem Tools) - Deploying Real Microsoft GPO and Endpoint Policy Manager Settings + +- [Deploying Endpoint Policy Managerdirectives without Group Policy (Endpoint Policy Manager Exporter Utility)](/docs/endpointpolicymanager/gettingstarted/misc/videos/methods/exporterutility.md) +- [Deploy Real Group Policy using SCCM or Other Management System!](/docs/endpointpolicymanager/gettingstarted/misc/videos/methods/sccmgrouppolicy.md) +- Deploy Endpoint Policy Manager Settings Using SCCM or Other Management System! + +## Endpoint Policy Manager and Windows Virtual Desktops (WVD) + +- [Endpoint Policy Manager & WVD (Windows Virtual Desktop) Getting Started](/docs/endpointpolicymanager/gettingstarted/misc/videos/windowsvirtualdesktops/gettingstarted.md) +- [Endpoint Policy Manager + WVD: Elevate the installation of the Remote Deskop app](/docs/endpointpolicymanager/gettingstarted/misc/videos/windowsvirtualdesktops/elevateinstall.md) +- [Endpoint Policy Manager + WVD: Elevate application inside WVD and bypass UAC prompts](/docs/endpointpolicymanager/gettingstarted/misc/videos/windowsvirtualdesktops/elevateapplication.md) +- [Endpoint Policy Manager + WVD: Manage the Start Screen and Taskbar](/docs/endpointpolicymanager/gettingstarted/misc/videos/windowsvirtualdesktops/startscreen.md) +- [Endpoint Policy Manager + WVD: Manage Applications Settings](/docs/endpointpolicymanager/gettingstarted/misc/videos/windowsvirtualdesktops/applicationsettings.md) +- [Endpoint Policy Manager + WVD: Reducing number of GPOs and using "GPOs with Brains"](/docs/endpointpolicymanager/gettingstarted/misc/videos/windowsvirtualdesktops/admintemplatemanager.md) +- [Endpoint Policy Manager + WVD: Browser Router ... the right browser for the right website.](/docs/endpointpolicymanager/gettingstarted/misc/videos/windowsvirtualdesktops/browserrouter.md) +- [Endpoint Policy Manager + Windows Virtual Desktop .. Better Together Tour](/docs/endpointpolicymanager/gettingstarted/misc/videos/windowsvirtualdesktops/tour.md) +- [Endpoint Privilege Manager + Windows Virtual Desktop](/docs/endpointpolicymanager/gettingstarted/misc/videos/windowsvirtualdesktops/leastprivilege.md) + +## Endpoint Policy Manager and FSLogix + +- [Endpoint Policy Manager + FSLogix ... Managing your Browsers with App Masking.](/docs/endpointpolicymanager/gettingstarted/misc/videos/fslogix/appmasking.md) +- [Endpoint Policy Manager and FSLogix Profiles: Better Together](/docs/endpointpolicymanager/gettingstarted/misc/videos/fslogix/profiles.md) +- [Endpoint Policy Manager + FSLogix: Manage the Windows 10 Start Menu](/docs/endpointpolicymanager/gettingstarted/misc/videos/fslogix/startmenu.md) +- [Endpoint Policy Manager + FSLogix: Set default browser based upon if the browser is masked or revealed](/docs/endpointpolicymanager/gettingstarted/misc/videos/fslogix/browserdefault.md) +- [Endpoint Policy Manager + FSLogix: The Right Browser for the Right Website](/docs/endpointpolicymanager/gettingstarted/misc/videos/fslogix/broswerright.md) +- [Endpoint Policy Manager + FSLogix: Setting browser configuration based upon which browser you actually have.](/docs/endpointpolicymanager/gettingstarted/misc/videos/fslogix/browserconfiguration.md) +- [Endpoint Policy Manager + FSLogix: Elevating applications when needed (and available by FSLogix)](/docs/endpointpolicymanager/gettingstarted/misc/videos/fslogix/elevatingapplications.md) + +## Endpoint Policy Manager & Cameyo + +- [Endpoint Policy Manager + Cameyo: Overcoming UAC prompts for Published Applications](/docs/endpointpolicymanager/gettingstarted/misc/videos/cameyo/uacprompts.md) +- [Endpoint Policy Manager Browser Router + Cameyo: Right Browser for the Right Website](/docs/endpointpolicymanager/gettingstarted/misc/videos/cameyo/browserright.md) +- [Endpoint Policy Manager and Cameyo: Start Screen and Taskbar Magic Tricks](/docs/endpointpolicymanager/gettingstarted/misc/videos/cameyo/startscreen.md) +- [Cameyo and Endpoint Policy Manager Application Settings Manager](/docs/endpointpolicymanager/gettingstarted/misc/videos/cameyo/applicationsettings.md) + +## Endpoint Policy Manager & Change Management Utilities + +- [Endpoint Policy Manager MMC: Showing History of items you create](/docs/endpointpolicymanager/gettingstarted/misc/videos/changemanagementutilities/history.md) +- [Endpoint Policy Manager and AGPM](/docs/endpointpolicymanager/gettingstarted/misc/videos/changemanagementutilities/advancedgrouppolicymanagement.md) +- [Endpoint Policy Manager and Quest's GPOADmin Tool](/docs/endpointpolicymanager/gettingstarted/misc/videos/changemanagementutilities/gpoadmintool.md) +- [Endpoint Policy Manager Integrates with NetIQ GPA](/docs/endpointpolicymanager/gettingstarted/misc/videos/changemanagementutilities/netiq.md) +- [Endpoint Policy Manager and Quest (ScriptLogic) ActiveAdministrator](/docs/endpointpolicymanager/gettingstarted/misc/videos/changemanagementutilities/scriptlogicactiveadministrator.md) +- [Endpoint Policy Manager and SDM CHANGE MANAGER](/docs/endpointpolicymanager/gettingstarted/misc/videos/changemanagementutilities/sdmchangemanager.md) diff --git a/docs/endpointpolicymanager/gettingstarted/misc/videos/windowsvirtualdesktops/_category_.json b/docs/endpointpolicymanager/gettingstarted/misc/videos/windowsvirtualdesktops/_category_.json new file mode 100644 index 0000000000..19b4abe465 --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/misc/videos/windowsvirtualdesktops/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Endpoint Policy Manager and Windows Virtual Desktops (WVD)", + "position": 60, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/windowsvirtualdesktops/admintemplatemanager.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/windowsvirtualdesktops/admintemplatemanager.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/windowsvirtualdesktops/admintemplatemanager.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/windowsvirtualdesktops/admintemplatemanager.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/windowsvirtualdesktops/applicationsettings.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/windowsvirtualdesktops/applicationsettings.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/windowsvirtualdesktops/applicationsettings.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/windowsvirtualdesktops/applicationsettings.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/windowsvirtualdesktops/browserrouter.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/windowsvirtualdesktops/browserrouter.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/windowsvirtualdesktops/browserrouter.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/windowsvirtualdesktops/browserrouter.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/windowsvirtualdesktops/elevateapplication.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/windowsvirtualdesktops/elevateapplication.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/windowsvirtualdesktops/elevateapplication.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/windowsvirtualdesktops/elevateapplication.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/windowsvirtualdesktops/elevateinstall.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/windowsvirtualdesktops/elevateinstall.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/windowsvirtualdesktops/elevateinstall.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/windowsvirtualdesktops/elevateinstall.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/windowsvirtualdesktops/gettingstarted.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/windowsvirtualdesktops/gettingstarted.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/windowsvirtualdesktops/gettingstarted.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/windowsvirtualdesktops/gettingstarted.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/windowsvirtualdesktops/leastprivilege.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/windowsvirtualdesktops/leastprivilege.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/windowsvirtualdesktops/leastprivilege.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/windowsvirtualdesktops/leastprivilege.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/windowsvirtualdesktops/startscreen.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/windowsvirtualdesktops/startscreen.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/windowsvirtualdesktops/startscreen.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/windowsvirtualdesktops/startscreen.md diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/windowsvirtualdesktops/tour.md b/docs/endpointpolicymanager/gettingstarted/misc/videos/windowsvirtualdesktops/tour.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/windowsvirtualdesktops/tour.md rename to docs/endpointpolicymanager/gettingstarted/misc/videos/windowsvirtualdesktops/tour.md diff --git a/docs/endpointpolicymanager/gettingstarted/overview.md b/docs/endpointpolicymanager/gettingstarted/overview.md new file mode 100644 index 0000000000..bf38b9b5bf --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/overview.md @@ -0,0 +1,143 @@ +--- +title: "Getting Started" +description: "Getting Started" +sidebar_position: 2 +--- + +# Getting Started + +To help get you started, this topic points you towards videos that will get you on the road and +working with Netwrix Endpoint Policy Manager (formerly PolicyPak) quickly. + +## Choose Your Deployment Method + +Select the deployment method that matches your environment: + +- **[Cloud](./cloud/)** - For Endpoint Policy Manager Cloud deployments +- **[Group Policy](./grouppolicy/)** - For traditional Active Directory environments +- **[MDM](./mdm/)** - For mobile device management and modern management +- **[Misc](./misc/)** - General getting started information and support resources + +## Quick Resources + +- **[Support and Resources](./fastest.md)** - Fast support options and important resources +- **[General Getting Started Information](./misc/)** - Basic concepts, tips, and FAQs + +## The Portal and Downloads + +In order to get the latest Endpoint Policy Manager downloads, you need access to the Endpoint Policy +Manager Customer Portal (shown in Figure 1). You can only get access to the portal from a Endpoint +Policy Manager sales associate. + +![getting_started_right_away](/images/endpointpolicymanager/getting_started_right_away.webp) + +Figure 1. Inside the Endpoint Policy Manager Customer Portal. + +:::note +Video: For an overview on how to use the Endpoint Policy Manager Customer Portal and +understand subscriptions, please watch the following video: +[https://www.endpointpolicymanager.com/video/endpointpolicymanager-portal-how-to-download-endpointpolicymanager-and-get-free-training.html](https://www.endpointpolicymanager.com/video/endpointpolicymanager-portal-how-to-download-endpointpolicymanager-and-get-free-training.html) +::: + + +Go to the Download section and select "Download Everything (Bits, Paks, Manuals but not Advice)," +and you will get a ZIP file with manuals. You will also receive the following: + +- A ZIP file containing all pre-configured AppSets for Endpoint Policy Manager Application Settings + Manager +- An ISO or ZIP file with the Endpoint Policy Manager installation files and licensing utility + +The Endpoint Policy Manager installation files are delivered as both ZIP and ISO so you can use +Endpoint Policy Manager in virtual environments (which can easily mount ISO files) or burn a CD of +the contents. + +You may also want to utilize the free 7-Zip program to open ZIP or ISO downloads and extract the +files. Download 7-Zip from [http://www.7-zip.org/](http://www.7-zip.org/). In Figure 2, you can see +the list of files and directories that are inside the Endpoint Policy Manager ZIP or ISO download. + +![getting_started_right_away_1](/images/endpointpolicymanager/getting_started_right_away_1.webp) + +Figure 2. The folders that are inside the download. + +Following is a description of what each folder contains and where it should be installed. + +### Licensing for All On-Premise Products + +The licensing for All On-Premise Products contains the licensing utility needed to request and +implement Endpoint Policy Manager license keys. We will be discussing the utility (LT.exe) later. + +### Admin Console MSI for all On-Premise Products + +The Admin Console MSI for all On-Premise Products is installed on your management stations (wherever +you have the GPMC) or in the location where you wish to create Endpoint Policy Manager directives. +This installation also has the Endpoint Policy Manager Exporter and Group Policy Object (GPO) touch +utility (both are explained later). Once this is installed, you'll see a Endpoint Policy Manager +node whenever you edit a GPO. You can choose between a 32-bit and a 64-bit file. + +### Client-Side Extension (CSE) for All On-Premise Products + +The Client-Side Extension (CSE) for All On-Premise Products is installed on every client machine +(Windows 7 and later, Terminal Services (RDS), and Citrix). You can choose between a 32-bit and a +64-bit file. + +### PolicyPak ADMX (Troubleshooting) + +Endpoint Policy Manager ADMX (Troubleshooting) is meant to be used in conjunction with minor +configuration changes or working with tech support. These are ADMX files that can be placed in your +local or central Group Policy store to provide configurable options. + +### PolicyPak Application Manager Extras + +Endpoint Policy Manager Application Manager Extras contains the Endpoint Policy Manager DesignStudio +installer, which is used to create your own AppSets for Endpoint Policy Manager Application Settings +Manager. + +### PolicyPak Extras + +Endpoint Policy Manager Extras contains some miscellaneous utilities and helper tools. + +### PolicyPak Group Policy Compliance Reporter + +Endpoint Policy Manager Group Policy Compliance Reporter contains the Endpoint Policy Manager Group +Policy Compliance Reporter console and Endpoint Policy Manager Group Policy Compliance Reporter +server (optional) for Group Policy reporting. Note that the Compliance Reporter must be specifically +licensed. + +## Get Licensed + +With the exception of Endpoint Policy Manager Cloud (which is self licensed), Endpoint Policy +Manager requires the endpoint to be licensed to work with the components you wish to use. Therefore, +for Endpoint Policy Manager to work after you download everything from the portal, you need to do +the following: + +**Step 1 –** Request a license and send that key to Sales for processing. You can watch a video on +how to request a license at the following link: +[How to Request Licenses from Endpoint Policy Manager by Creating a "License Request Key"](/docs/endpointpolicymanager/licensing/videolearningcenter/requestall/licenserequestkey.md). + +**Step 2 –** Receive a license and install it. You can watch a video on how to install the license +you receive at the following +link:[How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/licensing/videolearningcenter/installall/installuniversal.md). + +## Get Started with the GPO Method + +Most customers want to use Endpoint Policy Manager with Group Policy. You can watch the getting +started video on how to install and run some initial tests at the following link: +[Endpoint Policy Manager with Group Policy Method: Getting Started](/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/gettingstarted/gettingstartedv.md). + +## GetStarted with the Endpoint Policy Manager Cloud Method + +If you want to get started right away with Endpoint Policy Manager Cloud, watch this video for a +quick overview: [Endpoint Policy Manager Cloud: QuickStart](/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/quickstart.md). + +## Get Started with Your MDM Provider or UEM Tool + +Getting started with your mobile device management (MDM) provider or UEM tool takes a few more steps +than is covered in one video. In this case, instead of a single video, we recommend you watch each +of the videos at the links below in order to get prepared to use Endpoint Policy Manager with your +MDM provider. + +- For video overviews of using Endpoint Policy Manager with an MDM service see: Getting Started with + MDM > [Video Learning Center](/docs/endpointpolicymanager/deliverymethods/mdm/videos/videolearningcenter.md). +- For video overviews of using Endpoint Policy Manager with a UEM tool like SCCM see: Getting + Started with Endpoint Policy Manager (Misc) > + [Knowledge Base](/docs/endpointpolicymanager/). diff --git a/docs/endpointpolicymanager/gettingstarted/overviewinstall/_category_.json b/docs/endpointpolicymanager/gettingstarted/overviewinstall/_category_.json new file mode 100644 index 0000000000..8b6ba04b1f --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/overviewinstall/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Installation Quick Start", + "position": 30, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overviewinstall" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/clientsideextension.md b/docs/endpointpolicymanager/gettingstarted/overviewinstall/clientsideextension.md similarity index 92% rename from docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/clientsideextension.md rename to docs/endpointpolicymanager/gettingstarted/overviewinstall/clientsideextension.md index 315814a0af..66e0d5e49e 100644 --- a/docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/clientsideextension.md +++ b/docs/endpointpolicymanager/gettingstarted/overviewinstall/clientsideextension.md @@ -40,7 +40,7 @@ In the next section, we will discuss the following three main ideas: Our recommended tool of choice to get the Endpoint Policy Manager CSE deployed to multiple machines is PDQ Deploy. PDQ Deploy has a free mode and a paid mode, which is reasonably priced. You can see how to deploy a package with PDQ Deploy please see the -[Managing Group Policy using Endpoint Policy Manager and PDQ Deploy](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/methodpdqdeploy/pdqdeploy.md) +[Managing Group Policy using Endpoint Policy Manager and PDQ Deploy](/docs/endpointpolicymanager/installation/knowledgebase/methodpdqdeploy/pdqdeploy.md) topic for additional information. ## MDM, UEM, or RMM Tools @@ -74,8 +74,8 @@ containing the target computers. :::note To see a demonstration of this section, please watch these two tutorial videos: -[Mass Deploy the Endpoint Policy Manager CSE using GPSI](/docs/endpointpolicymanager/knowledgebase/archive/massdeploy.md) and -[Upgrading the CSE using GPSI](/docs/endpointpolicymanager/knowledgebase/archive/upgrading.md). In this example, we've created a GPO named +[Mass Deploy the Endpoint Policy Manager CSE using GPSI](/docs/endpointpolicymanager/archive/massdeploy.md) and +[Upgrading the CSE using GPSI](/docs/endpointpolicymanager/archive/upgrading.md). In this example, we've created a GPO named Deploy PP Client and linked it to East Sales Desktops. ::: @@ -114,4 +114,4 @@ If you have an older version of the Endpoint Policy Manager CSE and wish to upda Policy Software Installation, it's easy to do. For more information on how to perform an upgrade using Group Policy Software Installation. See the -[Upgrading the CSE using GPSI](/docs/endpointpolicymanager/knowledgebase/archive/upgrading.md) topic for additional information. +[Upgrading the CSE using GPSI](/docs/endpointpolicymanager/archive/upgrading.md) topic for additional information. diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/downloadcontents.md b/docs/endpointpolicymanager/gettingstarted/overviewinstall/downloadcontents.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/downloadcontents.md rename to docs/endpointpolicymanager/gettingstarted/overviewinstall/downloadcontents.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/overviewinstall.md b/docs/endpointpolicymanager/gettingstarted/overviewinstall/overviewinstall.md similarity index 83% rename from docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/overviewinstall.md rename to docs/endpointpolicymanager/gettingstarted/overviewinstall/overviewinstall.md index f61626e518..f2a9c4a151 100644 --- a/docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/overviewinstall.md +++ b/docs/endpointpolicymanager/gettingstarted/overviewinstall/overviewinstall.md @@ -19,16 +19,16 @@ overview of the process you need to follow: :::note This guide provides you with the most basic steps to get Endpoint Policy Manager unpacked and installed and ready to use. See the other topics in the parent publication, as well as the -[Knowledge Base](/docs/endpointpolicymanager/knowledgebase/knowledgebase.md) > All Things Installation & Upkeep and the +[Knowledge Base](/docs/endpointpolicymanager/) > All Things Installation & Upkeep and the All Things Installation & Upkeep -[Video Learning Center](/docs/endpointpolicymanager/knowledgebase/installation/videolearningcenter/videolearningcenter.md) topics for additional +[Video Learning Center](/docs/endpointpolicymanager/installation/videolearningcenter/videolearningcenter.md) topics for additional information. ::: If you are unfamiliar with what Endpoint Policy Manager even does, consider watching this two minute overview: -[Endpoint Policy Manager Explained: In about two minutes](/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/gettingstarted/explained.md). +[Endpoint Policy Manager Explained: In about two minutes](/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/gettingstarted/explained.md). For this trial, Endpoint Policy Manager endpoints may be: diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/powershell.md b/docs/endpointpolicymanager/gettingstarted/overviewinstall/powershell.md similarity index 98% rename from docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/powershell.md rename to docs/endpointpolicymanager/gettingstarted/overviewinstall/powershell.md index b5e5f78576..7123469da6 100644 --- a/docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/powershell.md +++ b/docs/endpointpolicymanager/gettingstarted/overviewinstall/powershell.md @@ -59,7 +59,7 @@ The request output is shownbelow. :::note To understand scope versus SOM, see -[Why does License Tool ask Who am I and Where do I want to use Endpoint Policy Manager?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/scope.md). +[Why does License Tool ask Who am I and Where do I want to use Endpoint Policy Manager?](/docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/scope.md). ::: diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/prepareendpoint.md b/docs/endpointpolicymanager/gettingstarted/overviewinstall/prepareendpoint.md similarity index 92% rename from docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/prepareendpoint.md rename to docs/endpointpolicymanager/gettingstarted/overviewinstall/prepareendpoint.md index 5fe3abeee4..ab1503e73e 100644 --- a/docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/prepareendpoint.md +++ b/docs/endpointpolicymanager/gettingstarted/overviewinstall/prepareendpoint.md @@ -48,7 +48,7 @@ machines. :::note See the -[Endpoint Policy Manager ARM Support Supportability Statement](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/gettingstarted/arm.md) +[Endpoint Policy Manager ARM Support Supportability Statement](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/gettingstarted/arm.md) topic about Endpoint Policy Manager Support on Arm processors. ::: @@ -73,8 +73,8 @@ be sooner than expected. See the -[How can I tell how a machine is licensed (by GPO, MDM, or XML file), and also know for what components it is licensed?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/components.md) +[How can I tell how a machine is licensed (by GPO, MDM, or XML file), and also know for what components it is licensed?](/docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/components.md) topic for further details on validating licensing. See also the -[Testing and Troubleshooting By Renaming an endpoint Computer](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/mdm.md) +[Testing and Troubleshooting By Renaming an endpoint Computer](/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/mdm.md) topic for further details showing what happens when you rename a computer and how Endpoint Policy Manager reacts. diff --git a/docs/endpointpolicymanager/gettingstarted/overviewinstall/preparemanagementsta/_category_.json b/docs/endpointpolicymanager/gettingstarted/overviewinstall/preparemanagementsta/_category_.json new file mode 100644 index 0000000000..c930e6161f --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/overviewinstall/preparemanagementsta/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Step 3: Prepare a management station to create Endpoint Policy Manager policies", + "position": 30, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "preparemanagementstation" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/preparemanagementsta/preparemanagementstation.md b/docs/endpointpolicymanager/gettingstarted/overviewinstall/preparemanagementsta/preparemanagementstation.md similarity index 88% rename from docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/preparemanagementsta/preparemanagementstation.md rename to docs/endpointpolicymanager/gettingstarted/overviewinstall/preparemanagementsta/preparemanagementstation.md index 2d944007a4..46429ab9b2 100644 --- a/docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/preparemanagementsta/preparemanagementstation.md +++ b/docs/endpointpolicymanager/gettingstarted/overviewinstall/preparemanagementsta/preparemanagementstation.md @@ -23,13 +23,13 @@ Console (GPMC) installed on it. Therefore, good candidates are your own manageme box” or, if you wish, you may install on a Domain Controller. **TIP**: Use the instructions in the -[What are the two ways that can I install the GPMC on my Admin Station (Server or Windows 10) machine?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/gpoinitialinstall/methods.md) +[What are the two ways that can I install the GPMC on my Admin Station (Server or Windows 10) machine?](/docs/endpointpolicymanager/installation/knowledgebase/gpoinitialinstall/methods.md) topic if you do not yet have the GPMC on your management station. :::note The Endpoint Policy Manager MMC Group Policy Snap-In does NOT require installation on a Domain Controller, it is simply an option. See the -[Does Endpoint Policy Manager admin console need to be installed on Domain Controller (DC)?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/gpoinitialinstall/adminconsole.md) +[Does Endpoint Policy Manager admin console need to be installed on Domain Controller (DC)?](/docs/endpointpolicymanager/installation/knowledgebase/gpoinitialinstall/adminconsole.md) topic for details. ::: @@ -57,5 +57,5 @@ you’ll see the extra Netwrix nodes alongside the Microsoft nodes. Additional resources you may be interested in: -- [How to create a DC for editing purposes](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/testlabbestpractices/createdc.md) -- [Admin Console And CSE Installation](/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/gettingstarted/install.md) +- [How to create a DC for editing purposes](/docs/endpointpolicymanager/deliverymethods/cloud/videos/testlabbestpractices/createdc.md) +- [Admin Console And CSE Installation](/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/gettingstarted/install.md) diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/preparemanagementsta/specificcomponents.md b/docs/endpointpolicymanager/gettingstarted/overviewinstall/preparemanagementsta/specificcomponents.md similarity index 82% rename from docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/preparemanagementsta/specificcomponents.md rename to docs/endpointpolicymanager/gettingstarted/overviewinstall/preparemanagementsta/specificcomponents.md index 80b769886c..cf12d68ea2 100644 --- a/docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/preparemanagementsta/specificcomponents.md +++ b/docs/endpointpolicymanager/gettingstarted/overviewinstall/preparemanagementsta/specificcomponents.md @@ -9,21 +9,21 @@ sidebar_position: 10 Endpoint Policy Manager is now installed on an endpoint (which is temporarily licensed) and you have a management station from which to create policies. To get a quick rundown of Endpoint Policy Manager using the Group Policy Method, watch the -[Endpoint Policy Manager with Group Policy Method: Getting Started](/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/gettingstarted/gettingstartedv.md) +[Endpoint Policy Manager with Group Policy Method: Getting Started](/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/gettingstarted/gettingstartedv.md) video. To get a quick rundown of Endpoint Policy Manager using the MDM / Intune Method, watch the -[Endpoint Policy Manager and MDM walk before you run](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/gettingstarted/testsample.md) video. +[Endpoint Policy Manager and MDM walk before you run](/docs/endpointpolicymanager/deliverymethods/mdm/videos/gettingstarted/testsample.md) video. TIPS: - You won’t need a license file because you’re licensed with COMPUTER in the computer name. - See the Getting Started with MDM > Video Learning Center > - [Getting Started](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/videolearningcenter.md) topic for additional + [Getting Started](/docs/endpointpolicymanager/deliverymethods/mdm/videos/videolearningcenter.md) topic for additional demonstrations using specific MDM services like Intune and VMware Workspace one. If you want to go beyond the basics and really dive in to each component, like Endpoint Policy Manager Least Privilege Manager or Endpoint Policy Manager Device Manager, or any of our components, see the -[Netwrix Endpoint Policy Manager (formerly PolicyPak) Knowledge Base Articles](/docs/endpointpolicymanager/knowledgebase/knowledgebase.md) +[Netwrix Endpoint Policy Manager (formerly PolicyPak) Knowledge Base Articles](/docs/endpointpolicymanager/) topic, then locate the component of interest and its corresponding Knowledge Base articles and Video Learning Center topics. For true mastery on the basics of a component, you should watch all the videos in order within the Getting Started section of the Video Learning Center topics. These answer diff --git a/docs/endpointpolicymanager/gettingstarted/quickstart/_category_.json b/docs/endpointpolicymanager/gettingstarted/quickstart/_category_.json new file mode 100644 index 0000000000..7ac1777b8f --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/quickstart/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Netwrix Endpoint Policy Manager Quick Start", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/gettingstarted/quickstart/cloud.md b/docs/endpointpolicymanager/gettingstarted/quickstart/cloud.md new file mode 100644 index 0000000000..7bf012f082 --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/quickstart/cloud.md @@ -0,0 +1,56 @@ +--- +title: "Endpoint Policy Manager Cloud Delivery Quick Start" +description: "Endpoint Policy Manager Cloud Delivery Quick Start" +sidebar_position: 30 +--- + +# Endpoint Policy Manager Cloud Delivery Quick Start + +For an overview of delivery via PolicyPak Cloud, see the +[Endpoint Policy Manager Cloud: QuickStart](/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/quickstart.md) video . + +Follow the steps below to carry out the Endpoint Policy Manager cloud delivery: + +**Step 1 –** Install the Endpoint Policy Manager Cloud Client on an example endpoint + +Log on to [cloud.endpointpolicymanager.com](http://cloud.endpointpolicymanager.com/) with the credentials provided to you +via email from Netwrix sales. In the Company tab download the PolicyPak Cloud Client MSI for your +PolicyPak Cloud tenant. + +Install it by hand on a few Windows 10 or Windows 11 endpoints. Alternatively, use your software +deployment tool (like Intune) to deliver the CSE to a few endpoints. See the +[Endpoint Policy Manager Cloud + MDM Services: Install Cloud Client + automatically join PPC Groups and get policy.](/docs/endpointpolicymanager/deliverymethods/cloud/videos/usingwithothermethods/mdm.md) +video of using Intune to bootstrap the PolicyPak cloud client install. + +The Endpoint Policy Manager Cloud Client automatically installs the PolicyPak CSE at the same time. + +:::note +Each time you install the Endpoint Policy Manager Cloud Client you will consume one of +your 10 example licenses +::: + + +**Step 2 –** (optional, recommended): Install the Endpoint Policy Manager Admin Console on a +management machine with the GPMC pre-installed + +In the download, find the **Admin Console MSI**. Install it by hand on your machine. Your machine +needs to also have the GPMC pre-installed from Microsoft. We recommend you have both the Endpoint +Policy Manager Admin Console and the GPMC installed on a “fake DC” exclusively for editing purposes. +See the [How to create a DC for editing purposes](/docs/endpointpolicymanager/deliverymethods/cloud/videos/testlabbestpractices/createdc.md) video for +details and how to do this. + +:::note +If you bypass this step, you can still use the Endpoint Policy Manager in-cloud editors, +but some options may not be available to you for editing without an on-prem editor station. +::: + + +**Step 3 –** Start creating policies using Endpoint Policy Manager Cloud + +If you want to make Microsoft Group Policy settings via Endpoint Policy Manager Cloud, see the +[Endpoint Policy ManagerCloud: How to deploy Microsoft Group Policy Settings using Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/grouppolicysettings.md)video. + +If you want to make Endpoint Policy Manager specific settings (like Endpoint Policy Manager Least +Privilege Manager, etc.) via Endpoint Policy Manager Cloud, see the +[Endpoint Policy ManagerCloud: How to deploy Endpoint Policy Manager specific settings (using in-cloud editors and exporting from on-prem)](/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/endpointpolicymanagersettings.md) +video. diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/quickstart/grouppolicy.md b/docs/endpointpolicymanager/gettingstarted/quickstart/grouppolicy.md similarity index 81% rename from docs/endpointpolicymanager/manuals/introductionandquick/quickstart/grouppolicy.md rename to docs/endpointpolicymanager/gettingstarted/quickstart/grouppolicy.md index dff155a5a7..52fd44ee1b 100644 --- a/docs/endpointpolicymanager/manuals/introductionandquick/quickstart/grouppolicy.md +++ b/docs/endpointpolicymanager/gettingstarted/quickstart/grouppolicy.md @@ -7,7 +7,7 @@ sidebar_position: 10 # Group Policy Delivery Quick Start For an overview of Group Policy Quick Start, the -[Admin Console And CSE Installation](/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/gettingstarted/install.md) video. +[Admin Console And CSE Installation](/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/gettingstarted/install.md) video. **Step 1 –** Install the Endpoint Policy Manager Client on an example endpoint @@ -21,7 +21,7 @@ pre-installed In the download, find the **Admin Console MSI**and install it by hand on your machine. Your machine needs to also have the GPMC pre-installed from Microsoft. We recommend you have both the Endpoint Policy Manager Admin Console and the GPMC installed on a “fake DC” exclusively for editing purposes. -See the [How to create a DC for editing purposes](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/testlabbestpractices/createdc.md) video for +See the [How to create a DC for editing purposes](/docs/endpointpolicymanager/deliverymethods/cloud/videos/testlabbestpractices/createdc.md) video for details and how to do this. **Step 3 –** Install your license key or rename your example endpoint to have computer in the name @@ -34,9 +34,9 @@ have the word Computer in the name, and the computer will act fully licensed. Follow the -[How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/installall/installuniversal.md) +[How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/licensing/videolearningcenter/installall/installuniversal.md) video to install a license file. Check the -[What is the fastest way to get started in an Endpoint Policy Manager trial, without running the License Request Tool?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingall/trial.md) +[What is the fastest way to get started in an Endpoint Policy Manager trial, without running the License Request Tool?](/docs/endpointpolicymanager/licensing/knowledgebase/requestingall/trial.md) topic to see how to rename a computer or perform alternative licensing. diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/quickstart/mdm.md b/docs/endpointpolicymanager/gettingstarted/quickstart/mdm.md similarity index 81% rename from docs/endpointpolicymanager/manuals/introductionandquick/quickstart/mdm.md rename to docs/endpointpolicymanager/gettingstarted/quickstart/mdm.md index aeb44a7f84..576bc715ca 100644 --- a/docs/endpointpolicymanager/manuals/introductionandquick/quickstart/mdm.md +++ b/docs/endpointpolicymanager/gettingstarted/quickstart/mdm.md @@ -7,7 +7,7 @@ sidebar_position: 20 # MDM / Intune Delivery Quick Start For a video overview of MDM delivery via Intune, see the -[Endpoint Policy Manager and Microsoft Intune](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/gettingstarted/microsoftintune.md). The installation +[Endpoint Policy Manager and Microsoft Intune](/docs/endpointpolicymanager/deliverymethods/mdm/videos/gettingstarted/microsoftintune.md). The installation steps are below. **Step 1 –** Install the Endpoint Policy Manager Client on an example endpoint. @@ -23,7 +23,7 @@ In the download, find the **Admin Console MSI** and install it manually on your machine needs to also have the GPMC pre-installed from Microsoft. It is recommended that you have both the Endpoint Policy Manager Admin Console and the GPMC installed on a “fake DC” exclusively for editing purposes. See the -[How to create a DC for editing purposes](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/testlabbestpractices/createdc.md) video for details +[How to create a DC for editing purposes](/docs/endpointpolicymanager/deliverymethods/cloud/videos/testlabbestpractices/createdc.md) video for details and how to do this. **Step 3 –** Install your license key or rename your example endpoint to have computer in the name. @@ -35,9 +35,9 @@ have the word Computer in the name, and the computer will act fully licensed. ::: -Follow the [Endpoint Policy Manager and MDM walk before you run](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/gettingstarted/testsample.md) +Follow the [Endpoint Policy Manager and MDM walk before you run](/docs/endpointpolicymanager/deliverymethods/mdm/videos/gettingstarted/testsample.md) video to install an MDM license file. Check the -[What is the fastest way to get started in an Endpoint Policy Manager trial, without running the License Request Tool?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingall/trial.md) +[What is the fastest way to get started in an Endpoint Policy Manager trial, without running the License Request Tool?](/docs/endpointpolicymanager/licensing/knowledgebase/requestingall/trial.md) topic to see how to rename a computer or perform alternative licensing. diff --git a/docs/endpointpolicymanager/gettingstarted/quickstart/overview.md b/docs/endpointpolicymanager/gettingstarted/quickstart/overview.md new file mode 100644 index 0000000000..11ff576855 --- /dev/null +++ b/docs/endpointpolicymanager/gettingstarted/quickstart/overview.md @@ -0,0 +1,23 @@ +--- +title: "Netwrix Endpoint Policy Manager Quick Start" +description: "Netwrix Endpoint Policy Manager Quick Start" +sidebar_position: 20 +--- + +# Netwrix Endpoint Policy Manager Quick Start + +Getting Started + +First, download the Netwrix Endpoint Policy Manager (formerly PolicyPak) software from the portal at +endpointpolicymanager.com. See the +[Endpoint Policy ManagerPortal: How to download Endpoint Policy Manager and get free training](/docs/endpointpolicymanager/gettingstarted/misc/videos/gettingstartedmisc/freetraining.md) +topic for video details on downloading. + +Next, Netwrix Endpoint Policy Manager (formerly PolicyPak) enables you to deliver settings via Group +Policy, MDM or PolicyPak Cloud. + +:::info +Use Group Policy for your Quick Start. However, any delivery method may be used +as appropriate. + +::: diff --git a/docs/endpointpolicymanager/gpcompliancereporter/_category_.json b/docs/endpointpolicymanager/gpcompliancereporter/_category_.json new file mode 100644 index 0000000000..fa39204c6b --- /dev/null +++ b/docs/endpointpolicymanager/gpcompliancereporter/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "GP Compliance Reporter", + "position": 60, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/gpcompliancereporter/manual/_category_.json b/docs/endpointpolicymanager/gpcompliancereporter/manual/_category_.json new file mode 100644 index 0000000000..700bbc7e70 --- /dev/null +++ b/docs/endpointpolicymanager/gpcompliancereporter/manual/_category_.json @@ -0,0 +1 @@ +{"label":"Manual","position":1,"collapsed":true,"collapsible":true} diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/grouppolicycomplianc/admxregistry.md b/docs/endpointpolicymanager/gpcompliancereporter/manual/admxregistry.md similarity index 98% rename from docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/grouppolicycomplianc/admxregistry.md rename to docs/endpointpolicymanager/gpcompliancereporter/manual/admxregistry.md index db73c94f9d..e8c5961c80 100644 --- a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/grouppolicycomplianc/admxregistry.md +++ b/docs/endpointpolicymanager/gpcompliancereporter/manual/admxregistry.md @@ -11,7 +11,7 @@ happens. There are two ways to turn on extended logging: downloadable REG files would use the downloadable REG files when you want to enable extended logging on just one machine, and you would use the ADMX/ADML files to enable extended logging on multiple machines. The downloadable REG files are found on our website at: PolicyPak GP Compliance Reporter > -[Knowledge Base](/docs/endpointpolicymanager/knowledgebase/knowledgebase.md). The ADMX files are +[Knowledge Base](/docs/endpointpolicymanager/). The ADMX files are in the download of Endpoint Policy Manager GPCR, as shown in Figure 77. ![tuning_and_troubleshooting_18](/images/endpointpolicymanager/troubleshooting/grouppolicycompliancereporter/tuning_and_troubleshooting_18.webp) diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/grouppolicycomplianc/auditing.md b/docs/endpointpolicymanager/gpcompliancereporter/manual/auditing.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/grouppolicycomplianc/auditing.md rename to docs/endpointpolicymanager/gpcompliancereporter/manual/auditing.md diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/grouppolicycomplianc/clientendpoint.md b/docs/endpointpolicymanager/gpcompliancereporter/manual/clientendpoint.md similarity index 97% rename from docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/grouppolicycomplianc/clientendpoint.md rename to docs/endpointpolicymanager/gpcompliancereporter/manual/clientendpoint.md index ac67680311..06598a26ab 100644 --- a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/grouppolicycomplianc/clientendpoint.md +++ b/docs/endpointpolicymanager/gpcompliancereporter/manual/clientendpoint.md @@ -66,7 +66,7 @@ console) and each target machine requesting RSOP. An example of these errors is :::note For a video addressing the opening of the firewall ports as described in this section, please go to the following link: -[Open required firewall ports](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/troubleshooting/firewallports.md). +[Open required firewall ports](/docs/endpointpolicymanager/gpcompliancereporter/videos/troubleshooting/firewallports.md). ::: diff --git a/docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/_category_.json b/docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/_category_.json new file mode 100644 index 0000000000..fed5f95f34 --- /dev/null +++ b/docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Concepts and Quick Start", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "concepts" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/concepts.md b/docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/concepts.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/concepts.md rename to docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/concepts.md diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/grouppolicyresults.md b/docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/grouppolicyresults.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/grouppolicyresults.md rename to docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/grouppolicyresults.md diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/overview.md b/docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/overview.md rename to docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/overview.md diff --git a/docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/prepare/_category_.json b/docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/prepare/_category_.json new file mode 100644 index 0000000000..aeda5ae471 --- /dev/null +++ b/docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/prepare/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Getting Ready", + "position": 30, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/prepare/client.md b/docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/prepare/client.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/prepare/client.md rename to docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/prepare/client.md diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/prepare/configurationwizard.md b/docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/prepare/configurationwizard.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/prepare/configurationwizard.md rename to docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/prepare/configurationwizard.md diff --git a/docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/prepare/licensing.md b/docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/prepare/licensing.md new file mode 100644 index 0000000000..2ff596c332 --- /dev/null +++ b/docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/prepare/licensing.md @@ -0,0 +1,117 @@ +--- +title: "Licensing Information" +description: "Licensing Information" +sidebar_position: 20 +--- + +# Licensing Information + +Neither the Endpoint Policy Manager GPCR server nor the client (admin console) require a license; +but the endpoint does. + +:::note +Watch this video to see how to request a license: +[How to Request Licenses from Endpoint Policy Manager by Creating a "License Request Key"](/docs/endpointpolicymanager/licensing/videolearningcenter/requestall/licenserequestkey.md). +::: + + +:::note +To install the license file received from Endpoint Policy Manager, see the following +video: +[How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/licensing/videolearningcenter/installall/installuniversal.md). +::: + + +Note that since the Endpoint Policy Manager client (admin console) does not need to be licensed, you +may run unlimited numbers of it in any organizational unit (OU). The Endpoint Policy Manager client +does not have to receive license files in order to work properly. + +## Licenses and Reporting + +Table 1 provides more detail as to what is reported through Endpoint Policy Manager GPCR. + +Table 1: GPCR reporting. + +| If the target (endpoint) computer has… | Endpoint Policy Manager GPCR will… | +| ----------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| No license | Return nothing in the RSOP report | +| The word "computer" in the name | Report everything: all Endpoint Policy Manager settings, Microsoft Admin Templates settings, Microsoft Group Policy Preferences settings, and Microsoft Security settings A computer acts as if it had a Endpoint Policy Manager GPCR license. | +| A Endpoint Policy Manager GPCR endpoint license | Report everything: all Endpoint Policy Manager settings, Microsoft Admin Templates settings, Microsoft Group Policy Preferences settings, and Microsoft Security settings The client machine will be fully licensed. | + +In order to get Microsoft data (policies, security, and preferences), license all endpoints for +Endpoint Policy Manager GPCR reporting. You may also license Endpoint Policy Manager GPCR endpoints +if you are not licensed for other Endpoint Policy Manager products. You are not required to purchase +other AppSets or policies if you only want to engage in Group Policy reporting via the Endpoint +Policy Manager GPCR. To get licensed, run the licensing tool (LT) to generate a license request key +(LRK), then send it to Endpoint Policy Manager Sales. + +## Supported Group Policy Settings for Reporting + +Supported and unsupported Group Policy settings within a GPO or test are shown in Table 2. + +Table 2: Group Policy supported and unsupported settings. + +| Data type | User Policies | Computer Policies | +| ----------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Endpoint Policy Manager settings (all) | ![gpcr_concepts_and_quickstart_4_17x17](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_4_17x17.webp) | ![gpcr_concepts_and_quickstart_4_17x17](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_4_17x17.webp) | +| Group Policy Admin Templates (all ADM(X) templates and settings) | ![gpcr_concepts_and_quickstart_4_17x17](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_4_17x17.webp) | ![gpcr_concepts_and_quickstart_4_17x17](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_4_17x17.webp) | +| Group Policy Security Settings | | | +| Windows | Security | | | +| Account Policies | Password Policy | n/a | ![gpcr_concepts_and_quickstart_4_17x17](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_4_17x17.webp) | +| Account Policies | Account Lockout Policy | n/a | ![gpcr_concepts_and_quickstart_4_17x17](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_4_17x17.webp) | +| Account Policies | Kerberos Policy | n/a | ![gpcr_concepts_and_quickstart_4_17x17](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_4_17x17.webp) | +| Local Policies | Audit Policy | n/a | ![gpcr_concepts_and_quickstart_4_17x17](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_4_17x17.webp) | +| Local Policies | User Rights Assignment | n/a | ![gpcr_concepts_and_quickstart_4_17x17](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_4_17x17.webp) | +| Local Policies | Security Options | n/a | ![gpcr_concepts_and_quickstart_4_17x17](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_4_17x17.webp) | +| Event log | n/a | ![gpcr_concepts_and_quickstart_4_17x17](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_4_17x17.webp) | +| Windows Settings | | | +| Name resolution policy | n/a | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | +| Scripts | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | +| Policy-based QoS | n/a | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | +| Public key policies | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | n/a | +| Software restriction policies | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | n/a | +| Restricted groups | n/a | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | +| System services | n/a | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | +| Registry | n/a | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | +| File | n/a | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | +| Wired network (IEEE 802.3) policies | n/a | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | +| Windows firewall with advanced security | n/a | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | +| Network list manager policies | n/a | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | +| Wireless network (IEEE 802.11) policies | n/a | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | +| Network access protection | n/a | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | +| Application control policies (Applocker) | n/a | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | +| IP security policies on Active Directory | n/a | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | +| Advanced audit policy configuration | n/a | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | +| Group Policy Preferences (all are supported except those listed below) | ![gpcr_concepts_and_quickstart_4_17x17](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_4_17x17.webp) | ![gpcr_concepts_and_quickstart_4_17x17](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_4_17x17.webp) | +| Group Policy Preference data sources | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | +| Scheduled tasks (immediate XP, scheduled XP) | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | +| Power options and scheme (for Windows XP) | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | +| ODBC data source | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | +| Folder options | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | ![gpcr_concepts_and_quickstart_4_17x17](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_4_17x17.webp)\* | +| Start menu (for XP) | n/a | ![gpcr_concepts_and_quickstart_4_17x17](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_4_17x17.webp) | +| Internet Explorer (5, 6, and 7) | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | +| Registry collection (special registry item type) | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | +| Folder redirection | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | n/a | +| Internet Explorer maintenance | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | n/a | +| Group Policy software install | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | +| Any third-party Group Policy Extension not from Endpoint Policy Manager | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | + +\*File type actions are not in the RSOP and thus show as "missing" in PPGPCR. + +:::note +Endpoint Policy Manager GPCR is licensed per computer; if a particular endpoint is not +licensed, it will not return data. +::: + + +:::note +It may look like there are more unsupported settings than supported settings. However, the +settings that are supported cover the top 90% of tasks that administrators typically do with Group +Policy and the unsupported settings cover the bottom 10%. We will be expanding coverage as needed in +the future. +::: + + +Endpoint Policy Manager Sales can send you a working Endpoint Policy Manager GPCR key. To install +the key, follow these instructions: +[How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/licensing/videolearningcenter/installall/installuniversal.md). diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/prepare/overview.md b/docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/prepare/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/prepare/overview.md rename to docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/prepare/overview.md diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/prepare/trialmode.md b/docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/prepare/trialmode.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/prepare/trialmode.md rename to docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/prepare/trialmode.md diff --git a/docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/pull/_category_.json b/docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/pull/_category_.json new file mode 100644 index 0000000000..ebd0689a66 --- /dev/null +++ b/docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/pull/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Standalone (Pull) Mode Quick Start", + "position": 40, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/pull/history.md b/docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/pull/history.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/pull/history.md rename to docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/pull/history.md diff --git a/docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/pull/overview.md b/docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/pull/overview.md new file mode 100644 index 0000000000..17b5166b7d --- /dev/null +++ b/docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/pull/overview.md @@ -0,0 +1,26 @@ +--- +title: "Standalone (Pull) Mode Quick Start" +description: "Standalone (Pull) Mode Quick Start" +sidebar_position: 40 +--- + +# Standalone (Pull) Mode Quick Start + +:::note +For an overview of Endpoint Policy Manager GPCR in pull mode, watch this video +[Using Pull Mode (with or without PPGPCR server)](/docs/endpointpolicymanager/gpcompliancereporter/videos/gettingstarted/modepull.md). +::: + + +Endpoint Policy Manager GPCR has three panes in which you can perform work: + +- Snapshots: This is where you create sets of computers you want to query. +- Tests: This is where you define tests that you want to validate. +- Results: This is where you select a specific snapshot and a test and get results (see Figure 11) + +![gpcr_concepts_and_quickstart_12](/images/endpointpolicymanager/grouppolicycompliancereporter/mode/pull/gpcr_concepts_and_quickstart_12.webp) + +Figure 11. The Results pane of the GPCR client (admin console). + +Endpoint Policy Manager GPCR starts on the Snapshots pane. We'll start on this pane and move through +each of the panes in the sections below. diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/pull/results.md b/docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/pull/results.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/pull/results.md rename to docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/pull/results.md diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/pull/snapshots.md b/docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/pull/snapshots.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/pull/snapshots.md rename to docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/pull/snapshots.md diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/pull/tests.md b/docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/pull/tests.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/pull/tests.md rename to docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/pull/tests.md diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/testsrctorder.md b/docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/testsrctorder.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/testsrctorder.md rename to docs/endpointpolicymanager/gpcompliancereporter/manual/concepts/testsrctorder.md diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/grouppolicycomplianc/eventlogs.md b/docs/endpointpolicymanager/gpcompliancereporter/manual/eventlogs.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/grouppolicycomplianc/eventlogs.md rename to docs/endpointpolicymanager/gpcompliancereporter/manual/eventlogs.md diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/grouppolicycomplianc/overview.md b/docs/endpointpolicymanager/gpcompliancereporter/manual/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/grouppolicycomplianc/overview.md rename to docs/endpointpolicymanager/gpcompliancereporter/manual/overview.md diff --git a/docs/endpointpolicymanager/gpcompliancereporter/manual/push/_category_.json b/docs/endpointpolicymanager/gpcompliancereporter/manual/push/_category_.json new file mode 100644 index 0000000000..2ca7ad9049 --- /dev/null +++ b/docs/endpointpolicymanager/gpcompliancereporter/manual/push/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Server with Push Mode", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/push/clientlessauditing.md b/docs/endpointpolicymanager/gpcompliancereporter/manual/push/clientlessauditing.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/push/clientlessauditing.md rename to docs/endpointpolicymanager/gpcompliancereporter/manual/push/clientlessauditing.md diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/push/concepts.md b/docs/endpointpolicymanager/gpcompliancereporter/manual/push/concepts.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/push/concepts.md rename to docs/endpointpolicymanager/gpcompliancereporter/manual/push/concepts.md diff --git a/docs/endpointpolicymanager/gpcompliancereporter/manual/push/install.md b/docs/endpointpolicymanager/gpcompliancereporter/manual/push/install.md new file mode 100644 index 0000000000..cbadf499a8 --- /dev/null +++ b/docs/endpointpolicymanager/gpcompliancereporter/manual/push/install.md @@ -0,0 +1,57 @@ +--- +title: "Installation and Uninstallation" +description: "Installation and Uninstallation" +sidebar_position: 10 +--- + +# Installation and Uninstallation + +We recommend that installation of the GPCR Server Edition be on a server (Server 2008 R2 or higher). +However, Endpoint Policy Manager GPCR in push mode doesn't need to be installed on a server at all, +and could be installed on any machine (Windows 7 or higher). To start the installation, find the +Endpoint Policy Manager GP Compliance Reporter (Server).msi file, as shown in Figure 36. + +![gpcr_server_with_push_mode](/images/endpointpolicymanager/grouppolicycompliancereporter/mode/push/gpcr_server_with_push_mode.webp) + +Figure 36. GPCR server MSI. + +**Step 1 –** To install Endpoint Policy Manager GP Compliance Reporter, click on the MSI file and +start the wizard (Figure 37). + +![gpcr_server_with_push_mode_1](/images/endpointpolicymanager/grouppolicycompliancereporter/mode/push/gpcr_server_with_push_mode_1.webp) + +Figure 37. The Endpoint Policy Manager Group Policy Compliance Reporter Server Setup Wizard. + +**Step 2 –** Next, choose the domain group that will have rights to the Endpoint Policy Manager GPCR +server as shown in Figure 38. + +:::note +To see a video on Compliance Reporter and specific group membership requirements, see the +following link: +[Enhanced Security for Server](/docs/endpointpolicymanager/gpcompliancereporter/videos/gettingstarted/securityenhanced.md). +::: + + +![gpcr_server_with_push_mode_2](/images/endpointpolicymanager/grouppolicycompliancereporter/mode/push/gpcr_server_with_push_mode_2.webp) + +Figure 38. Choosing the domain group that will have access to the GPCR server. + +**Step 3 –** Then select which type of database you want to use (see Figure 39). You can choose +Microsoft SQL Server Compact if you only expect a small amount of data for processing and testing. +However, in most cases, Microsoft SQL Server is recommended. + +![gpcr_server_with_push_mode_3](/images/endpointpolicymanager/grouppolicycompliancereporter/mode/push/gpcr_server_with_push_mode_3.webp) + +Figure 39. Selecting the type of database. + +**Step 4 –** Once the installation process is complete, close the wizard. + +:::note +If you need to uninstall Endpoint Policy Manager GPCR Server, use Add/Remove Programs and +uninstall Endpoint Policy Manager. Then, remove +::: + + +`C:\ProgramData\PolicyPak\PolicyPak Group Policy Compliance Reporter Server` and all subfolders. +Additionally, remove the Endpoint Policy Manager Group Policy Compliance Reporter (endpoint) license +from the Group Policy Object (GPO). diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/push/overview.md b/docs/endpointpolicymanager/gpcompliancereporter/manual/push/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/push/overview.md rename to docs/endpointpolicymanager/gpcompliancereporter/manual/push/overview.md diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/push/resultsreports.md b/docs/endpointpolicymanager/gpcompliancereporter/manual/push/resultsreports.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/push/resultsreports.md rename to docs/endpointpolicymanager/gpcompliancereporter/manual/push/resultsreports.md diff --git a/docs/endpointpolicymanager/gpcompliancereporter/manual/push/setup/_category_.json b/docs/endpointpolicymanager/gpcompliancereporter/manual/push/setup/_category_.json new file mode 100644 index 0000000000..979e38f376 --- /dev/null +++ b/docs/endpointpolicymanager/gpcompliancereporter/manual/push/setup/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Setup and Clientless Auditing", + "position": 40, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/push/setup/auditorpath.md b/docs/endpointpolicymanager/gpcompliancereporter/manual/push/setup/auditorpath.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/push/setup/auditorpath.md rename to docs/endpointpolicymanager/gpcompliancereporter/manual/push/setup/auditorpath.md diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/push/setup/overview.md b/docs/endpointpolicymanager/gpcompliancereporter/manual/push/setup/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/push/setup/overview.md rename to docs/endpointpolicymanager/gpcompliancereporter/manual/push/setup/overview.md diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/push/setup/selectauditedcomputers.md b/docs/endpointpolicymanager/gpcompliancereporter/manual/push/setup/selectauditedcomputers.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/push/setup/selectauditedcomputers.md rename to docs/endpointpolicymanager/gpcompliancereporter/manual/push/setup/selectauditedcomputers.md diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/push/setup/specifyserver.md b/docs/endpointpolicymanager/gpcompliancereporter/manual/push/setup/specifyserver.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/push/setup/specifyserver.md rename to docs/endpointpolicymanager/gpcompliancereporter/manual/push/setup/specifyserver.md diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/push/setup/taskdelivery.md b/docs/endpointpolicymanager/gpcompliancereporter/manual/push/setup/taskdelivery.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/push/setup/taskdelivery.md rename to docs/endpointpolicymanager/gpcompliancereporter/manual/push/setup/taskdelivery.md diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/push/switchmode.md b/docs/endpointpolicymanager/gpcompliancereporter/manual/push/switchmode.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/push/switchmode.md rename to docs/endpointpolicymanager/gpcompliancereporter/manual/push/switchmode.md diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/grouppolicycomplianc/scheduledtasks.md b/docs/endpointpolicymanager/gpcompliancereporter/manual/scheduledtasks.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/grouppolicycomplianc/scheduledtasks.md rename to docs/endpointpolicymanager/gpcompliancereporter/manual/scheduledtasks.md diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/grouppolicycomplianc/server.md b/docs/endpointpolicymanager/gpcompliancereporter/manual/server.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/grouppolicycomplianc/server.md rename to docs/endpointpolicymanager/gpcompliancereporter/manual/server.md diff --git a/docs/endpointpolicymanager/gpcompliancereporter/manual/tuning/_category_.json b/docs/endpointpolicymanager/gpcompliancereporter/manual/tuning/_category_.json new file mode 100644 index 0000000000..005f1f93b3 --- /dev/null +++ b/docs/endpointpolicymanager/gpcompliancereporter/manual/tuning/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Tuning Group Policy Compliance Reporter", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/grouppolicycomplianc/tuning/admx.md b/docs/endpointpolicymanager/gpcompliancereporter/manual/tuning/admx.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/grouppolicycomplianc/tuning/admx.md rename to docs/endpointpolicymanager/gpcompliancereporter/manual/tuning/admx.md diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/grouppolicycomplianc/tuning/overview.md b/docs/endpointpolicymanager/gpcompliancereporter/manual/tuning/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/grouppolicycomplianc/tuning/overview.md rename to docs/endpointpolicymanager/gpcompliancereporter/manual/tuning/overview.md diff --git a/docs/endpointpolicymanager/gpcompliancereporter/overview.md b/docs/endpointpolicymanager/gpcompliancereporter/overview.md new file mode 100644 index 0000000000..682292f691 --- /dev/null +++ b/docs/endpointpolicymanager/gpcompliancereporter/overview.md @@ -0,0 +1,44 @@ +--- +title: "GP Compliance Reporter Overview" +description: "GP Compliance Reporter provides comprehensive Group Policy reporting and compliance monitoring" +sidebar_position: 1 +--- + +# GP Compliance Reporter + +GP Compliance Reporter is a powerful component of Endpoint Policy Manager that provides comprehensive Group Policy reporting, compliance monitoring, and audit capabilities for your organization. + +## Quick Links + +### 📖 [Manual](./manual/) +Complete documentation for using GP Compliance Reporter: +- **Installation and Setup** - Get started with GP Compliance Reporter +- **Configuration** - Configure reporting and compliance settings +- **Advanced Features** - Leverage advanced reporting capabilities + +### 🎥 [Videos](./videos/) +Video tutorials and demonstrations: +- Getting Started guides +- Configuration tutorials +- Best practices and tips +- Troubleshooting scenarios + +### 🔧 [Tech Notes](./technotes/) +Technical information and troubleshooting: +- Licensing and setup guides +- Installation troubleshooting +- Advanced configuration tips +- Common issues and solutions + +## Key Features + +- Comprehensive Group Policy compliance reporting +- Real-time monitoring and alerting +- Audit trail and change tracking +- Custom reporting and dashboards +- Integration with existing infrastructure +- Enterprise-scale deployment support + +## Getting Started + +Start with the [Manual](./manual/) section to learn the basics and get GP Compliance Reporter installed and configured in your environment. \ No newline at end of file diff --git a/docs/endpointpolicymanager/gpcompliancereporter/technotes/_category_.json b/docs/endpointpolicymanager/gpcompliancereporter/technotes/_category_.json new file mode 100644 index 0000000000..4616dbde55 --- /dev/null +++ b/docs/endpointpolicymanager/gpcompliancereporter/technotes/_category_.json @@ -0,0 +1 @@ +{"label":"Tech Notes","position":20,"collapsed":true,"collapsible":true,"link":{"type":"doc","id":"knowledgebase"}} diff --git a/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/_category_.json b/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/_category_.json new file mode 100644 index 0000000000..6997fa359b --- /dev/null +++ b/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Getting Licensed", + "position": 20, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/basis.md b/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/basis.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/basis.md rename to docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/basis.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/compliancereports.md b/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/compliancereports.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/compliancereports.md rename to docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/compliancereports.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/difference.md b/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/difference.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/difference.md rename to docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/difference.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/expire.md b/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/expire.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/expire.md rename to docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/expire.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/minimum.md b/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/minimum.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/minimum.md rename to docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/minimum.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/multiyear.md b/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/multiyear.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/multiyear.md rename to docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/multiyear.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/shareacrossteam.md b/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/shareacrossteam.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/shareacrossteam.md rename to docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/shareacrossteam.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/tool.md b/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/tool.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/tool.md rename to docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/tool.md diff --git a/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/trial.md b/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/trial.md new file mode 100644 index 0000000000..1c4f9ac15a --- /dev/null +++ b/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/trial.md @@ -0,0 +1,10 @@ +--- +title: "How does Trial mode for Endpoint Policy Manager Group Policy Compliance Reporter work?" +description: "How does Trial mode for Endpoint Policy Manager Group Policy Compliance Reporter work?" +sidebar_position: 70 +--- + +# How does Trial mode for Endpoint Policy Manager Group Policy Compliance Reporter work? + +See this +article: [What is the fastest way to get started in an Endpoint Policy Manager trial, without running the License Request Tool?](/docs/endpointpolicymanager/licensing/knowledgebase/requestingall/trial.md) diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/trueup.md b/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/trueup.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/trueup.md rename to docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/trueup.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/types.md b/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/types.md similarity index 96% rename from docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/types.md rename to docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/types.md index 1bc5f374a5..12e5c3421c 100644 --- a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/types.md +++ b/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/types.md @@ -19,7 +19,7 @@ If you rename a computer to have COMPUTER in the name, then that is a Trial Lice that this type is for testing only and is Not Recommended for production roll-out. More about Trial License is in this KB: -[What is the fastest way to get started in an Endpoint Policy Manager trial, without running the License Request Tool?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingall/trial.md) +[What is the fastest way to get started in an Endpoint Policy Manager trial, without running the License Request Tool?](/docs/endpointpolicymanager/licensing/knowledgebase/requestingall/trial.md) The software is contained within the standard BITS download from the portal. You simply set it up as seen in the Endpoint Policy Manager Group Policy Compliance diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/userlimit.md b/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/userlimit.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/userlimit.md rename to docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/userlimit.md diff --git a/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettingstarted/_category_.json b/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettingstarted/_category_.json new file mode 100644 index 0000000000..7eb735f33a --- /dev/null +++ b/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettingstarted/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Getting Started", + "position": 10, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettingstarted/deliveryreports.md b/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettingstarted/deliveryreports.md similarity index 92% rename from docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettingstarted/deliveryreports.md rename to docs/endpointpolicymanager/gpcompliancereporter/technotes/gettingstarted/deliveryreports.md index de6a3917a0..7f896d07bd 100644 --- a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettingstarted/deliveryreports.md +++ b/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettingstarted/deliveryreports.md @@ -26,7 +26,7 @@ mechanism." [https://www.endpointpolicymanager.com/products/endpointpolicymanag To answer question #2: Use the free Endpoint Policy Manager Cloud reporting tool. The Endpoint Policy Manager Cloud reporting tool can tell you "Did your Endpoint Policy Manager cloud directives make it there, when using Endpoint Policy Manager Cloud as the settings deliver -mechanism." [Endpoint Policy Manager Cloud Reporting Demo](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/reports.md) +mechanism." [Endpoint Policy Manager Cloud Reporting Demo](/docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/reports.md) To answer question #3: Use your MDM service to tell you if your MSI package made it there. [https://techcommunity.microsoft.com/t5/Intune-Customer-Success/Support-Tip-Troubleshooting-MSI-App-deployments-in-Microsoft/ba-p/359125](https://techcommunity.microsoft.com/t5/Intune-Customer-Success/Support-Tip-Troubleshooting-MSI-App-deployments-in-Microsoft/ba-p/359125) @@ -36,11 +36,11 @@ Policy Compliance reporter? When you acquire a Endpoint Policy Manager Cloud license, you can get directives from Endpoint Policy Manager Cloud -or- Group Policy (or both.) -[[Can I use both Endpoint Policy ManagerOn Premise mode and Endpoint Policy Manager Cloud simultaneously? Do they clash?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/onpremisecloud.md)] +[[Can I use both Endpoint Policy ManagerOn Premise mode and Endpoint Policy Manager Cloud simultaneously? Do they clash?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/tipstricksandfaqs/onpremisecloud.md)] As such, you might want to deliver some settings via Endpoint Policy Manager Cloud and other settings using Group -Policy.[Endpoint Policy ManagerCloud and Endpoint Policy Manager OnPremise – Together using PPCloud Licenses](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/usingwithothermethods/onpremise.md) +Policy.[Endpoint Policy ManagerCloud and Endpoint Policy Manager OnPremise – Together using PPCloud Licenses](/docs/endpointpolicymanager/deliverymethods/cloud/videos/usingwithothermethods/onpremise.md) In this scenario: diff --git a/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettingstarted/install.md b/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettingstarted/install.md new file mode 100644 index 0000000000..c18fa01ea7 --- /dev/null +++ b/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettingstarted/install.md @@ -0,0 +1,207 @@ +--- +title: "Installing and Configuring Endpoint Policy Manager GPCR for use with SQL Server using SQL Authentication" +description: "Installing and Configuring Endpoint Policy Manager GPCR for use with SQL Server using SQL Authentication" +sidebar_position: 40 +--- + +# Installing and Configuring Endpoint Policy Manager GPCR for use with SQL Server using SQL Authentication + +This document will step through preparing for and installing the GPCR server and Admin Client +software, and assumes MS SQL Server is installed on a separate, accessible server, using default +settings. + +## Configuring Active Directory + +Set who is allowed to access the GPCR client and what computers will have their data collected. + +**Step 1 –** Create a security group in the domain (e.g. GPCR Admin) and populate it with and +administrators that require access to the GPCR client (admin console) + +**Step 2 –** Create a security group in the domain (e.g. GPCR Computers) and populate it with +individual computers or other computer groups (e.g. Domain Computers) that will participate the +compliance reporting. + +## Configuring SQL Server + +### Set server Authentication + +Authentication must be set to allow both SQL and windows authentication + +**Step 1 –** Open "Microsoft SQL Server Management Studio" and connect to your server instance + +**Step 2 –** Right-click on SQL server instance and click "Properties" + +**Step 3 –** On the Server Properties page click on the "Security" tab and set the Server +authentication to "SQL Server and Windows Authentication" + +![673_1_image-20200430140138-1](/images/endpointpolicymanager/grouppolicycompliancereporter/673_1_image-20200430140138-1.webp) + +**Step 4 –** Click OK to Close + +**Step 5 –** If changed, restart MSSQLSERVER service + +### Create DB Admin + +Create an administrative SQL account within SSMS to own and access the GPCR database. + +**Step 1 –** Expand "Security", right-click "Logins" and select "New Login" + +**Step 2 –** On General tab + +1. Set Login name, e.g. "GPCR_DBAdmin" +2. Select radio button "SQL Server authentication" and set password +3. Uncheck "Enforce password policy" + + ![673_3_image-20200430140138-2](/images/endpointpolicymanager/grouppolicycompliancereporter/673_3_image-20200430140138-2.webp) + +**Step 3 –** Click on "Server Roles" tab and select "public" and "sysadmin" roles + +![673_5_image-20200430140138-3](/images/endpointpolicymanager/grouppolicycompliancereporter/673_5_image-20200430140138-3.webp) + +**Step 4 –** Save and close + +### Create Empty DB + +GPCR requires an empty SQL database be present during the installation + +**Step 1 –** In Microsoft SSMS, right-click on "Databases" and select "New Database" + +![673_7_image-20200430140138-4_471x171](/images/endpointpolicymanager/grouppolicycompliancereporter/673_7_image-20200430140138-4_471x171.webp) + +**Step 2 –** Enter name for database (e.g. GPCR) + +**Step 3 –** Set Owner as DB admin created earlier (GPCR_DBAdmin in example) + +**Step 4 –** Place DB and log files where desired, if different from default + +**Step 5 –** Save and close + +## Ensuring Connectivity + +Ensure communication is open between GPCR Client and SQL server + +### Enable DTC + +The following is run on both the Netwrix Endpoint Policy Manager (formerly PolicyPak) GPCR Client +computer (Where the Admin Console is installed) and the remote SQL Server + +**Step 1 –** Open Component Services + +1. Open the "run" box (Win-R), type `"dcomcnfg"` and click OK + +![673_9_image-20200430140138-5](/images/endpointpolicymanager/troubleshooting/error/gpocompilancereporter/669_3_image-20200327172830-3.webp) + +**Step 2 –** Expand Console Root -> Component Services -> Computers -> My Computer -> Distributed +Transaction Coordinator, Right-Click on Local DTC and click Properties + +![673_11_image-20200430140138-6](/images/endpointpolicymanager/troubleshooting/error/gpocompilancereporter/669_5_image-20200327172830-4.webp) + +**Step 3 –** On the Security tab -> Security Settings and Configure as follows: + +1. Check "Network DTC Access" +2. Check "Allow Inbound" and "Allow Outbound" +3. Select "No Authentication Required" +4. Check "Enable SNA LU 6.2 Transactions" +5. Click OK + + ![673_13_image-20200430140138-7](/images/endpointpolicymanager/troubleshooting/error/gpocompilancereporter/669_7_image-20200327172830-5.webp) + +**Step 4 –** The MSDTC service will need to be restarted for the changes to take affect – Click YES +to restart now or NO to restart manually later. + +### Enable Firewall Rules + +Enable DTC through the firewall on both Endpoint Policy Manager GPCR Server and the remote SQL +Server + +**Step 1 –** Open the Windows Defender Firewall + +**Step 2 –** Click on "Allow an app or feature through Windows Defender Firewall" + +![673_15_image-20200430140138-8](/images/endpointpolicymanager/troubleshooting/error/gpocompilancereporter/669_9_image-20200327172830-6.webp) + +**Step 3 –** Find "Distributed Transaction Coordinator", check and check the appropriate Network +profile (e.g. Domain). + +![673_17_image-20200430140138-9](/images/endpointpolicymanager/troubleshooting/error/gpocompilancereporter/669_11_image-20200327172830-7.webp) + +**Step 4 –** Click OK to save and close + +## Installing GPCR + +When installing GPCR, download the latest bits from Endpoint Policy Manager. It is our +recommendation that when downloading the latest software version, to grab "everything" (latest bits +plus Paks, manuals and guidance). They can be found at +[https://portal.endpointpolicymanager.com/downloads/everything](https://portal.endpointpolicymanager.com/downloads/everything) + +### GPCR Server + +These steps assume that this is the first time GPCR has been installed. If previously installed, you +will also be prompted to choose between the previously configured database and admin group, and the +setting new values for each. + +**Step 1 –** In the downloaded ISO or ZIP, open "Endpoint Policy Manager Group Policy Compliance +Reporter" folder and run Endpoint Policy Manager GP Compliance Reporter (Server).msi + +**Step 2 –** Click "Next >" through first screen + +**Step 3 –** GPCR requires that Server and client (admin console) be at version 20.3.2366.420 at +minimum. select "Yes, I confirm" and "Next >" to continue + +**Step 4 –** Accept agreement and "Next >" to continue + +**Step 5 –** Change installation or just click "Next >" to accept default (recommended) and continue + +**Step 6 –** Click "Change" and find domain security group created earlier (GPCR Admin in example) +and click "Next >" + +![673_19_image-20200430140138-10](/images/endpointpolicymanager/grouppolicycompliancereporter/673_19_image-20200430140138-10.webp) + +**Step 7 –** Select "Microsoft SQL Server and "Next >" + +![673_21_image-20200430140138-11](/images/endpointpolicymanager/grouppolicycompliancereporter/673_21_image-20200430140138-11.webp) + +**Step 8 –** Configure Connection to SQL Server + +1. Server = Hostname or IP address of SQL server +2. Uncheck "Trusted Connection …" +3. Type in Username and password of SQL account created earlier +4. Click "Refresh" to get list of Databases on SQL server and select empty DB created earlier +5. Next > + + ![673_23_image-20200430140138-12](/images/endpointpolicymanager/grouppolicycompliancereporter/673_23_image-20200430140138-12.webp) + +**Step 9 –** Install -> click yes if prompted for \*.msi + +### GPCR Client + +The GPCR Client (Admin Console) can be installed on any computer. It is recommended that it be +installed on the computer that is used for Group Policy Administration. + +:::note +The client itself is not licensed and thereby can be installed on as many computers as +required. +::: + + +**Step 1 –** In the downloaded ISO or ZIP, open "Endpoint Policy Manager Group Policy Compliance +Reporter" folder and run Endpoint Policy Manager GP Compliance Reporter (Admin Console).msi + +**Step 2 –** Click "Next >" through first screen + +**Step 3 –** GPCR requires that Server and client (admin console) be at version 20.3.2366.420 or +higher. Select "Yes, I confirm" and "Next >" to continue + +**Step 4 –** Accept agreement and "Next >" to continue + +**Step 5 –** Change installation or just click "Next >" to accept default (recommended) and continue + +**Step 6 –** Select desired application shortcuts and click "Next >" + +**Step 7 –** Install -> click yes if prompted for \*.msi + +### GPCR General configuration + +For information on completing the GPCR configuration wizard, setting up Auditing and Licensing, and +for general usage, please refer to the manual. In addition, review the KB video +[Installing Compliance Reporter Server and Client](/docs/endpointpolicymanager/gpcompliancereporter/videos/gettingstarted/install.md) diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettingstarted/scenarios.md b/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettingstarted/scenarios.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettingstarted/scenarios.md rename to docs/endpointpolicymanager/gpcompliancereporter/technotes/gettingstarted/scenarios.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettingstarted/sqlserver.md b/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettingstarted/sqlserver.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettingstarted/sqlserver.md rename to docs/endpointpolicymanager/gpcompliancereporter/technotes/gettingstarted/sqlserver.md diff --git a/docs/endpointpolicymanager/gpcompliancereporter/technotes/knowledgebase.md b/docs/endpointpolicymanager/gpcompliancereporter/technotes/knowledgebase.md new file mode 100644 index 0000000000..5f7ccce8df --- /dev/null +++ b/docs/endpointpolicymanager/gpcompliancereporter/technotes/knowledgebase.md @@ -0,0 +1,41 @@ +--- +title: "Knowledge Base" +description: "Knowledge Base" +sidebar_position: 10 +--- + +# Knowledge Base + +See the following Knowledge Base articles for Endpoint Policy Manager GP Compliance Reporter. + +## Getting Started + +- [What scenarios is PPGPCR not well suited for today?](/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettingstarted/scenarios.md) +- [Do I need the Group Policy Compliance Reporter product if I use Endpoint Policy ManagerCloud or Endpoint Policy Manager MDM? (Or, how do I get delivery reports for Group Policy, Cloud or MDM directives?)](/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettingstarted/deliveryreports.md) +- [What are the storage requirements when using PPGPCR with SQL server?](/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettingstarted/sqlserver.md) +- [Installing and Configuring Endpoint Policy Manager GPCR for use with SQL Server using SQL Authentication](/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettingstarted/install.md) + +## Getting Licensed + +- [Is Endpoint Policy Manager Group Policy Compliance Reporter licensed on a per-user basis or a per-computer basis?](/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/basis.md) +- [What kinds of licenses are there for Endpoint Policy Manager Group Policy Compliance Reporter?](/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/types.md) +- [How many people can use Endpoint Policy Manager Group Policy Compliance Reporter?](/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/userlimit.md) +- [I want to generate Compliance reports on Microsoft GP Preferences/Admin Templates and/or Security Settings. Which license do I need?](/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/compliancereports.md) +- [Can I share Compliance Reports, tests and history across my team?](/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/shareacrossteam.md) +- [What's the difference between Pull Mode, Push Mode and Standalone and Server components in the Group Policy Compliance Reporter?](/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/difference.md) +- [How does Trial mode for Endpoint Policy Manager Group Policy Compliance Reporter work?](/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/trial.md) +- [Is there a minimum purchase for Endpoint Policy Manager Group Policy Compliance Reporter?](/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/minimum.md) +- [What happens if I try to use Endpoint Policy ManagerGroup Policy Compliance Reporter in unlicensed places? What happens if the Endpoint Policy Manager Group Policy Compliance Reporter license expires?](/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/expire.md) +- [What is "Truing Up" for On-Premise products?](/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/trueup.md) +- [What if I don't run the license tool to "True-Up" my Endpoint Policy Manager Group Policy Compliance Reporter every year?](/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/tool.md) +- [What if I pay for multiple years of Endpoint Policy Manager Group Policy Compliance Reporter in advance?](/docs/endpointpolicymanager/gpcompliancereporter/technotes/gettinglicensed/multiyear.md) + +## Troubleshooting + +- [How can I use Group Policy Compliance Reporter with multiple domains?](/docs/endpointpolicymanager/gpcompliancereporter/technotes/troubleshooting/domainmultiple.md) +- [What Server-side items should I send to Tech Support if asked?](/docs/endpointpolicymanager/gpcompliancereporter/technotes/troubleshooting/serverside.md) +- [What does "Unsupported item" mean in PPGPCR reports and tests?](/docs/endpointpolicymanager/gpcompliancereporter/technotes/troubleshooting/unsupporteditem.md) +- [GPCR Snapshot fails with error "System.InvalidOperationException" when using a remote SQL server and one is a clone of the other](/docs/endpointpolicymanager/gpcompliancereporter/technotes/troubleshooting/systeminvalidoperationexception.md) +- [When using a remote SQL Server, GPCR Snapshot fails with error "System.InvalidOperationException" and "MSDTC has been disabled" in Debug log](/docs/endpointpolicymanager/gpcompliancereporter/technotes/troubleshooting/systeminvalidoperationexceptionmsdtc.md) +- [When does the Auditor process send up events to the server?](/docs/endpointpolicymanager/gpcompliancereporter/technotes/troubleshooting/processauditor.md) +- [How do I turn on enhanced logging for Endpoint Policy Manager Group Policy Compliance Reporter if asked to do so?](/docs/endpointpolicymanager/gpcompliancereporter/technotes/troubleshooting/logenhanced.md) diff --git a/docs/endpointpolicymanager/gpcompliancereporter/technotes/troubleshooting/_category_.json b/docs/endpointpolicymanager/gpcompliancereporter/technotes/troubleshooting/_category_.json new file mode 100644 index 0000000000..c5b7b877f0 --- /dev/null +++ b/docs/endpointpolicymanager/gpcompliancereporter/technotes/troubleshooting/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Troubleshooting", + "position": 30, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/gpcompliancereporter/technotes/troubleshooting/domainmultiple.md b/docs/endpointpolicymanager/gpcompliancereporter/technotes/troubleshooting/domainmultiple.md new file mode 100644 index 0000000000..552e34279b --- /dev/null +++ b/docs/endpointpolicymanager/gpcompliancereporter/technotes/troubleshooting/domainmultiple.md @@ -0,0 +1,114 @@ +--- +title: "How can I use Group Policy Compliance Reporter with multiple domains?" +description: "How can I use Group Policy Compliance Reporter with multiple domains?" +sidebar_position: 10 +--- + +# How can I use Group Policy Compliance Reporter with multiple domains? + +First – make sure you have GPCR implemented in the primary domain correctly. + +## Group Policy Compliance Reporter Implementation + +**Step 1 –** Make sure you have the latest download of Compliance Reporter, which you should have if +you recently downloaded the BITS from the portal + +**Step 2 –** Pick a server where you want to run Compliance Reporter + +**Step 3 –** Work through this video to install Compliance Reporter + +- [Installing Compliance Reporter Server and Client](/docs/endpointpolicymanager/gpcompliancereporter/videos/gettingstarted/install.md) + +**Step 4 –** Work through this video to setup Compliance Reporter and for machines to report in +(this is the Server version) + +- [Setting up Client-less Endpoint Auditing (Push Mode with Server)](/docs/endpointpolicymanager/gpcompliancereporter/videos/gettingstarted/modepush.md) + +## From within the videos above, here is a summary of some important steps: + +Preparatory Steps (before installing GPCR) + +**Step 1 –** Determine the AD Computer security group to be used + +1. Used for 2 Purposes + + - for Server to Accept RSOP uploads + - for ILT on the Scheduled Task GPO (optional) + +**Step 2 –** Confirm that a shortname will work for Auditor path, recommend FQDN + +1. Ie. Are you using DNS Suffix Search Lists in the primary domain and in other domains such that a + shortname will resolve into its FQDN correctly +2. In most cases, its safer to use the FQDN of the GPCR server + +**Step 3 –** Will we have access to Create GPO from Server or do we need to export + +1. Ie. Will the account that the admin/engineer is logged into while using GPCR have + access/permissions to create GPO's + +**Step 4 –** Recommended to Import `ADMX` files (for troubleshooting, further configuration, +logging, etc.) + +1. We have some Netwrix Endpoint Policy Manager (formerly PolicyPak) ADMX templates and among those + are several settings specific to GPCR that allows for enabling additional logging and managing + when and how often RSOP checkins occur +2. Recommend to have those imported to the domain Central Store of all domains to be available if + needed + +**Step 5 –** Understand pros and cons of doing all computers or just selections from certain sites +that are representative of the site and its population (and how the AD group plays into that) + +1. In domains that have a few hundred to a low thousand and are all well connected in large + locations, it is often ok to deploy the scheduled task GPO to all machines for all to check in +2. However for larger domains, and also when remote sites might be less well connected, having lower + bandwidth, its recommended to identify segments of computers to be "representatives" of their + population. That is, choose some number at a location to receive the GPO and be the + representatives of what machines at that location are receiving. + - This cuts down on bandwidth used and load on the server +3. The AD group created earlier can be used, by only having those computers desired as members. + +## Overall Server Setup Steps (detailed in videos links above) + +**Step 1 –** Install Server piece + +- This is a Windows Service + +**Step 2 –** Install Server Console + +- Often on same server as server service, but could be another server as well + +**Step 3 –** Configure Server settings via Console + +1. Will need the AD Group created for this step +2. Will need the server name (shortname or FQDN) for this step +3. Will need to be able to create a GPO or export and import later for this step + +![758_1_image-20200130171300-1_950x485](/images/endpointpolicymanager/grouppolicycompliancereporter/758_1_image-20200130171300-1_950x485.webp) + +## Enabling Other Domains to connect to GPCR + +**Step 1 –** Now that you have the server up and running in the primary domain, the following steps +are needed in each additional domain. + +**Step 2 –** Copy the GPO you created (during step 3 above configuring server) from Domain 1 to +Domain 2 and deploy it there + +1. Do a GPO Backup from Domain 1 +2. Copy the Backup folder to a server on Domain 2 +3. Restore GPO to Domain 2 +4. This article describes the general process of backing up and restoring GPO's, specifically in the + "About Backup and Import (between domains)" section - + [https://www.endpointpolicymanager.com/pp-blog/backing-up-your-gpos-with-and-without-policypak-data-dont-get-burned](https://www.endpointpolicymanager.com/pp-blog/backing-up-your-gpos-with-and-without-policypak-data-dont-get-burned) + +**Step 3 –** Create an AD group with the SAME NAME as the AD Group in Domain 1 + +**Step 4 –** Add computers in Domain 2 to the new Domain 2 AD Group + +### NOTE – Why a Group in each Domain is Required + +- Currently GPCR cannot innumerate members of a Domain Local group that are not in the same domain. + Even with a two way forest trust in place +- Therefore the workaround as noted above is to create the corresponding local domain group of the + same name as the primary GPCR domain + + ![758_3_image-20200130171300-2](/images/endpointpolicymanager/grouppolicycompliancereporter/758_3_image-20200130171300-2.webp) diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/troubleshooting/logenhanced.md b/docs/endpointpolicymanager/gpcompliancereporter/technotes/troubleshooting/logenhanced.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/troubleshooting/logenhanced.md rename to docs/endpointpolicymanager/gpcompliancereporter/technotes/troubleshooting/logenhanced.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/troubleshooting/processauditor.md b/docs/endpointpolicymanager/gpcompliancereporter/technotes/troubleshooting/processauditor.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/troubleshooting/processauditor.md rename to docs/endpointpolicymanager/gpcompliancereporter/technotes/troubleshooting/processauditor.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/troubleshooting/serverside.md b/docs/endpointpolicymanager/gpcompliancereporter/technotes/troubleshooting/serverside.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/troubleshooting/serverside.md rename to docs/endpointpolicymanager/gpcompliancereporter/technotes/troubleshooting/serverside.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/troubleshooting/systeminvalidoperationexception.md b/docs/endpointpolicymanager/gpcompliancereporter/technotes/troubleshooting/systeminvalidoperationexception.md similarity index 95% rename from docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/troubleshooting/systeminvalidoperationexception.md rename to docs/endpointpolicymanager/gpcompliancereporter/technotes/troubleshooting/systeminvalidoperationexception.md index 647ac24a44..c0fd28cbab 100644 --- a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/troubleshooting/systeminvalidoperationexception.md +++ b/docs/endpointpolicymanager/gpcompliancereporter/technotes/troubleshooting/systeminvalidoperationexception.md @@ -21,7 +21,7 @@ The MSDTC transaction manager was unable to pull the transaction from the source ``` To enable diagnostic logging, follow the directions in the article -[How do I turn on enhanced logging for Endpoint Policy Manager Group Policy Compliance Reporter if asked to do so?](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/troubleshooting/logenhanced.md)g-for-ppgpcr-server-if-asked/ +[How do I turn on enhanced logging for Endpoint Policy Manager Group Policy Compliance Reporter if asked to do so?](/docs/endpointpolicymanager/gpcompliancereporter/technotes/troubleshooting/logenhanced.md)g-for-ppgpcr-server-if-asked/ The resulting GPCR Server log can be found in: `C:\ProgramData\PolicyPak\PolicyPak Group Policy Compliance Reporter Server\Diagnostics` diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/troubleshooting/systeminvalidoperationexceptionmsdtc.md b/docs/endpointpolicymanager/gpcompliancereporter/technotes/troubleshooting/systeminvalidoperationexceptionmsdtc.md similarity index 97% rename from docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/troubleshooting/systeminvalidoperationexceptionmsdtc.md rename to docs/endpointpolicymanager/gpcompliancereporter/technotes/troubleshooting/systeminvalidoperationexceptionmsdtc.md index d41745252f..4e47c29cd0 100644 --- a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/troubleshooting/systeminvalidoperationexceptionmsdtc.md +++ b/docs/endpointpolicymanager/gpcompliancereporter/technotes/troubleshooting/systeminvalidoperationexceptionmsdtc.md @@ -20,7 +20,7 @@ tool.` ---> System.Runtime.InteropServices.COMException`: The transaction manage support for remote/network transactions. (Exception from HRESULT: 0x8004D024) To enable diagnostic logging, follow the directions in the article -[How do I turn on enhanced logging for Endpoint Policy Manager Group Policy Compliance Reporter if asked to do so?](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/troubleshooting/logenhanced.md) +[How do I turn on enhanced logging for Endpoint Policy Manager Group Policy Compliance Reporter if asked to do so?](/docs/endpointpolicymanager/gpcompliancereporter/technotes/troubleshooting/logenhanced.md) The resulting GPCR Server log can be found in: `C:\ProgramData\PolicyPak\PolicyPak Group Policy Compliance Reporter Server\Diagnostics` diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/troubleshooting/unsupporteditem.md b/docs/endpointpolicymanager/gpcompliancereporter/technotes/troubleshooting/unsupporteditem.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/troubleshooting/unsupporteditem.md rename to docs/endpointpolicymanager/gpcompliancereporter/technotes/troubleshooting/unsupporteditem.md diff --git a/docs/endpointpolicymanager/gpcompliancereporter/videos/_category_.json b/docs/endpointpolicymanager/gpcompliancereporter/videos/_category_.json new file mode 100644 index 0000000000..ecb52d82cd --- /dev/null +++ b/docs/endpointpolicymanager/gpcompliancereporter/videos/_category_.json @@ -0,0 +1 @@ +{"label":"Videos","position":10,"collapsed":true,"collapsible":true,"link":{"type":"doc","id":"videolearningcenter"}} diff --git a/docs/endpointpolicymanager/gpcompliancereporter/videos/gettingstarted/_category_.json b/docs/endpointpolicymanager/gpcompliancereporter/videos/gettingstarted/_category_.json new file mode 100644 index 0000000000..a4fd673330 --- /dev/null +++ b/docs/endpointpolicymanager/gpcompliancereporter/videos/gettingstarted/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Getting Started", + "position": 20, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/gettingstarted/install.md b/docs/endpointpolicymanager/gpcompliancereporter/videos/gettingstarted/install.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/gettingstarted/install.md rename to docs/endpointpolicymanager/gpcompliancereporter/videos/gettingstarted/install.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/gettingstarted/modepull.md b/docs/endpointpolicymanager/gpcompliancereporter/videos/gettingstarted/modepull.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/gettingstarted/modepull.md rename to docs/endpointpolicymanager/gpcompliancereporter/videos/gettingstarted/modepull.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/gettingstarted/modepush.md b/docs/endpointpolicymanager/gpcompliancereporter/videos/gettingstarted/modepush.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/gettingstarted/modepush.md rename to docs/endpointpolicymanager/gpcompliancereporter/videos/gettingstarted/modepush.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/gettingstarted/securityenhanced.md b/docs/endpointpolicymanager/gpcompliancereporter/videos/gettingstarted/securityenhanced.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/gettingstarted/securityenhanced.md rename to docs/endpointpolicymanager/gpcompliancereporter/videos/gettingstarted/securityenhanced.md diff --git a/docs/endpointpolicymanager/gpcompliancereporter/videos/troubleshooting/_category_.json b/docs/endpointpolicymanager/gpcompliancereporter/videos/troubleshooting/_category_.json new file mode 100644 index 0000000000..fa13af16ba --- /dev/null +++ b/docs/endpointpolicymanager/gpcompliancereporter/videos/troubleshooting/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Troubleshooting", + "position": 40, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/troubleshooting/firewallports.md b/docs/endpointpolicymanager/gpcompliancereporter/videos/troubleshooting/firewallports.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/troubleshooting/firewallports.md rename to docs/endpointpolicymanager/gpcompliancereporter/videos/troubleshooting/firewallports.md diff --git a/docs/endpointpolicymanager/gpcompliancereporter/videos/using/_category_.json b/docs/endpointpolicymanager/gpcompliancereporter/videos/using/_category_.json new file mode 100644 index 0000000000..ee4e54ed5f --- /dev/null +++ b/docs/endpointpolicymanager/gpcompliancereporter/videos/using/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Using Endpoint Policy Manager Group Policy Compliance Reporter", + "position": 30, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/using/existinggpos.md b/docs/endpointpolicymanager/gpcompliancereporter/videos/using/existinggpos.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/using/existinggpos.md rename to docs/endpointpolicymanager/gpcompliancereporter/videos/using/existinggpos.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/using/importgpos.md b/docs/endpointpolicymanager/gpcompliancereporter/videos/using/importgpos.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/using/importgpos.md rename to docs/endpointpolicymanager/gpcompliancereporter/videos/using/importgpos.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/using/importstig.md b/docs/endpointpolicymanager/gpcompliancereporter/videos/using/importstig.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/using/importstig.md rename to docs/endpointpolicymanager/gpcompliancereporter/videos/using/importstig.md diff --git a/docs/endpointpolicymanager/gpcompliancereporter/videos/videolearningcenter.md b/docs/endpointpolicymanager/gpcompliancereporter/videos/videolearningcenter.md new file mode 100644 index 0000000000..90d3464eee --- /dev/null +++ b/docs/endpointpolicymanager/gpcompliancereporter/videos/videolearningcenter.md @@ -0,0 +1,33 @@ +--- +title: "Video Learning Center" +description: "Video Learning Center" +sidebar_position: 20 +--- + +# Video Learning Center + +See the following Video topics for Endpoint Policy Manager GP Compliance Reporter. + +## What does it do, and why do I need it? + +- [2 Minute Quick Overview for Managers](/docs/endpointpolicymanager/gpcompliancereporter/videos/whatdoesitdo/overviewmanager.md) +- [7 Minute Technical Overview for IT Pros](/docs/endpointpolicymanager/gpcompliancereporter/videos/whatdoesitdo/overviewtechnical.md) +- [Standalone Mode](/docs/endpointpolicymanager/gpcompliancereporter/videos/whatdoesitdo/modestandalone.md) +- [Server Mode](/docs/endpointpolicymanager/gpcompliancereporter/videos/whatdoesitdo/modeserver.md) + +## Getting Started + +- [Installing Compliance Reporter Server and Client](/docs/endpointpolicymanager/gpcompliancereporter/videos/gettingstarted/install.md) +- [Using Pull Mode (with or without PPGPCR server)](/docs/endpointpolicymanager/gpcompliancereporter/videos/gettingstarted/modepull.md) +- [Setting up Client-less Endpoint Auditing (Push Mode with Server)](/docs/endpointpolicymanager/gpcompliancereporter/videos/gettingstarted/modepush.md) +- [Enhanced Security for Server](/docs/endpointpolicymanager/gpcompliancereporter/videos/gettingstarted/securityenhanced.md) + +## Using Endpoint Policy Manager Group Policy Compliance Reporter + +- [Endpoint Policy Manager GP Compliance Reporter: Using an Existing GPO as a test](/docs/endpointpolicymanager/gpcompliancereporter/videos/using/existinggpos.md) +- [Take existing GPOs and quickly bring them into PPGPCR (and keep them updated)](/docs/endpointpolicymanager/gpcompliancereporter/videos/using/importgpos.md) +- [Import STIG files to make your applications more secure](/docs/endpointpolicymanager/gpcompliancereporter/videos/using/importstig.md) + +## Troubleshooting + +- [Open required firewall ports](/docs/endpointpolicymanager/gpcompliancereporter/videos/troubleshooting/firewallports.md) diff --git a/docs/endpointpolicymanager/gpcompliancereporter/videos/whatdoesitdo/_category_.json b/docs/endpointpolicymanager/gpcompliancereporter/videos/whatdoesitdo/_category_.json new file mode 100644 index 0000000000..ed661a60be --- /dev/null +++ b/docs/endpointpolicymanager/gpcompliancereporter/videos/whatdoesitdo/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "What Does It Do And Why Do I Need It", + "position": 10, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/whatdoesitdo/modeserver.md b/docs/endpointpolicymanager/gpcompliancereporter/videos/whatdoesitdo/modeserver.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/whatdoesitdo/modeserver.md rename to docs/endpointpolicymanager/gpcompliancereporter/videos/whatdoesitdo/modeserver.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/whatdoesitdo/modestandalone.md b/docs/endpointpolicymanager/gpcompliancereporter/videos/whatdoesitdo/modestandalone.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/whatdoesitdo/modestandalone.md rename to docs/endpointpolicymanager/gpcompliancereporter/videos/whatdoesitdo/modestandalone.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/whatdoesitdo/overviewmanager.md b/docs/endpointpolicymanager/gpcompliancereporter/videos/whatdoesitdo/overviewmanager.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/whatdoesitdo/overviewmanager.md rename to docs/endpointpolicymanager/gpcompliancereporter/videos/whatdoesitdo/overviewmanager.md diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/whatdoesitdo/overviewtechnical.md b/docs/endpointpolicymanager/gpcompliancereporter/videos/whatdoesitdo/overviewtechnical.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/whatdoesitdo/overviewtechnical.md rename to docs/endpointpolicymanager/gpcompliancereporter/videos/whatdoesitdo/overviewtechnical.md diff --git a/docs/endpointpolicymanager/index.md b/docs/endpointpolicymanager/index.md index 676b6bc832..b1aee97452 100644 --- a/docs/endpointpolicymanager/index.md +++ b/docs/endpointpolicymanager/index.md @@ -16,3 +16,36 @@ software systems were designed for modern distributed scenarios. Netwrix Endpoin (formerly PolicyPak) enables you to solve your endpoint management and endpoint protection challenges wherever users get work done, modernizing and extending the power of your existing enterprise technology assets. + +## Components (Alphabetical) + +Comprehensive documentation index for all Endpoint Policy Manager components, organized alphabetically. Each component includes links to available manuals, tech notes, and videos: + +| | | | +| ------------------------------------------------------------------------------------------------------------------------------------------------------ | --------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| ![gpoexportmergeadmintemplatespreferences](/images/endpointpolicymanager/gpoexportmergeadmintemplatespreferences.webp) | Admin Templates Manager |
  • [Manual](/docs/endpointpolicymanager/components/admintemplatesmanager/manual/overview.md)
  • [Tech Notes](/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/knowledgebase.md)
  • [Videos](/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/videolearningcenter.md)
| +| ![applicationmanager](/images/endpointpolicymanager/applicationmanager.webp) | Application Settings Manager |
  • [Manual](/docs/endpointpolicymanager/components/applicationsettingsmanager/manual/overview.md)
  • [Tech Notes](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/knowledgebase.md)
  • [Videos](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/videolearningcenter.md)
| +| ![browserrouter](/images/endpointpolicymanager/browserrouter.webp) | Browser Router |
  • [Manual](/docs/endpointpolicymanager/components/browserrouter/manual/overview.md)
  • [Tech Notes](/docs/endpointpolicymanager/components/browserrouter/knowledgebase/knowledgebase.md)
  • [Videos](/docs/endpointpolicymanager/components/browserrouter/videolearningcenter/videolearningcenter.md)
| +| ![devicemanager](/images/endpointpolicymanager/devicemanager.webp) | Device Manager |
  • [Manual](/docs/endpointpolicymanager/components/devicemanager/manual/overview.md)
  • [Tech Notes](/docs/endpointpolicymanager/components/devicemanager/knowledgebase/knowledgebase.md)
  • [Videos](/docs/endpointpolicymanager/components/devicemanager/videolearningcenter/videolearningcenter.md)
| +| ![leastprivilegemanager](/images/endpointpolicymanager/leastprivilegemanager.webp) | Endpoint Privilege Manager (Windows and Mac) |
  • [Manual](/docs/endpointpolicymanager/components/endpointprivilegemanager/overview.md)
  • [Tech Notes](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/knowledgebase.md)
  • [Videos](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/videolearningcenter.md)
| +| ![featuremanagerwindows](/images/endpointpolicymanager/featuremanagerwindows.webp) | Feature Manager for Windows |
  • [Manual](/docs/endpointpolicymanager/components/featuremanager/manual/overview.md)
  • [Tech Notes](/docs/endpointpolicymanager/components/featuremanager/technotes/knowledgebase.md)
  • [Videos](/docs/endpointpolicymanager/components/featuremanager/videos/videolearningcenter.md)
| +| ![fileassociationsmanager](/images/endpointpolicymanager/fileassociationsmanager.webp) | File Associations Manager |
  • [Manual](/docs/endpointpolicymanager/components/fileassociationsmanager/manual/overview.md)
  • [Tech Notes](/docs/endpointpolicymanager/components/fileassociationsmanager/knowledgebase/knowledgebase.md)
  • [Videos](/docs/endpointpolicymanager/components/fileassociationsmanager/videolearningcenter/videolearningcenter.md)
| +| ![javaenterpriserulesmanager](/images/endpointpolicymanager/javaenterpriserulesmanager.webp) | Java Enterprise Rules Manager |
  • [Manual](/docs/endpointpolicymanager/components/javaenterpriserules/manual/javaenterpriserules/overview.md)
  • [Tech Notes](/docs/endpointpolicymanager/components/javaenterpriserules/technotes/knowledgebase.md)
  • [Videos](/docs/endpointpolicymanager/components/javaenterpriserules/videos/videolearningcenter.md)
| +| ![networksecuritymanager](/images/endpointpolicymanager/networksecuritymanager.webp) | Network Security Manager |
  • [Manual](/docs/endpointpolicymanager/components/networksecuritymanager/manual/overview.md)
  • [Videos](/docs/endpointpolicymanager/components/networksecuritymanager/videos/videolearningcenter.md)
| +| | Preferences Manager |
  • [Manual](/docs/endpointpolicymanager/components/preferencesmanager/manual/overview.md)
| +| ![rdpmanager](/images/endpointpolicymanager/rdpmanager.webp) | Remote Desktop Protocol (RDP) Manager |
  • [Manual](/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/manual/overview.md)
  • [Videos](/docs/endpointpolicymanager/components/remotedesktopprotocolmanager/videos/videolearningcenter.md)
| +| ![remoteworkdeliverymanager](/images/endpointpolicymanager/remoteworkdeliverymanager.webp) | Remote Work Delivery Manager |
  • [Manual](/docs/endpointpolicymanager/components/remoteworkdeliverymanager/manual/overview.md)
  • [Tech Notes](/docs/endpointpolicymanager/components/remoteworkdeliverymanager/technotes/knowledgebase.md)
  • [Videos](/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/videolearningcenter.md)
| +| ![scriptstriggersmanager](/images/endpointpolicymanager/scriptstriggersmanager.webp) | Scripts & Triggers Manager |
  • [Manual](/docs/endpointpolicymanager/components/scriptstriggers/manual/overview.md)
  • [Tech Notes](/docs/endpointpolicymanager/components/scriptstriggers/knowledgebase/knowledgebase.md)
  • [Videos](/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/videolearningcenter.md)
| +| | Security Settings Manager |
  • [Manual](/docs/endpointpolicymanager/components/securitysettingsmanager/manual/overview.md)
| +| ![softwarepackagemanager](/images/endpointpolicymanager/softwarepackagemanager.webp) | Software Package Manager |
  • [Manual](/docs/endpointpolicymanager/components/softwarepackage/manual/overview.md)
  • [Tech Notes](/docs/endpointpolicymanager/components/softwarepackage/technotes/knowledgebase.md)
  • [Videos](/docs/endpointpolicymanager/components/softwarepackage/videos/videolearningcenter.md)
| +| ![startscreentaskbarmanager](/images/endpointpolicymanager/startscreentaskbarmanager.webp) | Start Screen & Task Bar Manager |
  • [Manual](/docs/endpointpolicymanager/components/startscreenandtaskbar/manual/overview.md)
  • [Tech Notes](/docs/endpointpolicymanager/components/startscreenandtaskbar/technotes/knowledgebase.md)
  • [Videos](/docs/endpointpolicymanager/components/startscreenandtaskbar/videos/videolearningcenter.md)
| + +## Other Resources + +| | | | +| ------------------------------------------------------------------------------------------------------------------------------------------------------ | --------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| ![allthingslicensing](/images/endpointpolicymanager/allthingslicensing.webp) | All Things Licensing |
  • [Tech Notes](/docs/endpointpolicymanager/licensing/knowledgebase/knowledgebase.md)
  • [Videos](/docs/endpointpolicymanager/licensing/videolearningcenter/videolearningcenter.md)
| +| ![gettingstartedmisc](/images/endpointpolicymanager/gettingstartedmisc.webp) | Getting Started with Endpoint Policy Manager |
  • [Getting Started Hub](/docs/endpointpolicymanager/gettingstarted/overview.md)
  • [Cloud](/docs/endpointpolicymanager/deliverymethods/cloud/)
  • [Group Policy](/docs/endpointpolicymanager/deliverymethods/grouppolicy/)
  • [MDM](/docs/endpointpolicymanager/deliverymethods/mdm/)
| +| ![allthingsinstallationupkeep](/images/endpointpolicymanager/allthingsinstallationupkeep.webp) | All Things Installation & Upkeep |
  • [Tech Notes](/docs/endpointpolicymanager/installation/knowledgebase/knowledgebase.md)
  • [Videos](/docs/endpointpolicymanager/installation/videolearningcenter/videolearningcenter.md)
| +| ![gpcompliancereporter](/images/endpointpolicymanager/gpcompliancereporter.webp) | Endpoint Policy Manager GP Compliance Reporter |
  • [Tech Notes](/docs/endpointpolicymanager/gpcompliancereporter/technotes/knowledgebase.md)
  • [Videos](/docs/endpointpolicymanager/gpcompliancereporter/videos/videolearningcenter.md)
| +| ![archive](/images/endpointpolicymanager/archive.webp) | Archive |
  • [Archive](/docs/endpointpolicymanager/archive/overview.md)
| diff --git a/docs/endpointpolicymanager/installation/_category_.json b/docs/endpointpolicymanager/installation/_category_.json new file mode 100644 index 0000000000..fa2bd96f9a --- /dev/null +++ b/docs/endpointpolicymanager/installation/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "All Things Installation", + "position": 15, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/installation/knowledgebase/_category_.json b/docs/endpointpolicymanager/installation/knowledgebase/_category_.json new file mode 100644 index 0000000000..d92c78eb54 --- /dev/null +++ b/docs/endpointpolicymanager/installation/knowledgebase/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Knowledge Base", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "knowledgebase" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/installation/knowledgebase/backupandrestore/_category_.json b/docs/endpointpolicymanager/installation/knowledgebase/backupandrestore/_category_.json new file mode 100644 index 0000000000..39d893ae13 --- /dev/null +++ b/docs/endpointpolicymanager/installation/knowledgebase/backupandrestore/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Backup And Restore", + "position": 100, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/backupandrestore/restoredetails.md b/docs/endpointpolicymanager/installation/knowledgebase/backupandrestore/restoredetails.md similarity index 90% rename from docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/backupandrestore/restoredetails.md rename to docs/endpointpolicymanager/installation/knowledgebase/backupandrestore/restoredetails.md index 283a78aeec..9d1890c7d0 100644 --- a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/backupandrestore/restoredetails.md +++ b/docs/endpointpolicymanager/installation/knowledgebase/backupandrestore/restoredetails.md @@ -8,7 +8,7 @@ sidebar_position: 10 First, you can always restore ANY GPO if you have a full GPO backup.  If you have a GPO backup, then follow these steps: Here's our video on it..  -[Integration with Group Policy (Basics: Installation, Backup, Restore and Reporting !)](/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/gettingstarted/integration.md) +[Integration with Group Policy (Basics: Installation, Backup, Restore and Reporting !)](/docs/endpointpolicymanager/deliverymethods/grouppolicy/videos/gettingstarted/integration.md) However, if you do not have a full GPO backup, but only have an Active Directory backup you can still use this as a restore point. diff --git a/docs/endpointpolicymanager/installation/knowledgebase/gpoinitialinstall/_category_.json b/docs/endpointpolicymanager/installation/knowledgebase/gpoinitialinstall/_category_.json new file mode 100644 index 0000000000..812bef8c64 --- /dev/null +++ b/docs/endpointpolicymanager/installation/knowledgebase/gpoinitialinstall/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Method GPO Initial Install", + "position": 10, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/gpoinitialinstall/adminconsole.md b/docs/endpointpolicymanager/installation/knowledgebase/gpoinitialinstall/adminconsole.md similarity index 87% rename from docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/gpoinitialinstall/adminconsole.md rename to docs/endpointpolicymanager/installation/knowledgebase/gpoinitialinstall/adminconsole.md index 5965359116..c5e796becd 100644 --- a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/gpoinitialinstall/adminconsole.md +++ b/docs/endpointpolicymanager/installation/knowledgebase/gpoinitialinstall/adminconsole.md @@ -23,9 +23,9 @@ users actually log on to or use - Locally to YOUR management station machine, - To the Endpoint Policy Manager Central Store - [Working with Others and using the Central Store](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/centralstorework.md) + [Working with Others and using the Central Store](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/centralstorework.md) - A share - [Using Shares to Store Your Paks (Share-Based Storage)](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/shares.md). + [Using Shares to Store Your Paks (Share-Based Storage)](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/shares.md). :::note Point 3 is needed for Endpoint Policy Manager Application Settings Manager (PPASM) only. diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/gpoinitialinstall/methods.md b/docs/endpointpolicymanager/installation/knowledgebase/gpoinitialinstall/methods.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/gpoinitialinstall/methods.md rename to docs/endpointpolicymanager/installation/knowledgebase/gpoinitialinstall/methods.md diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/gpoinitialinstall/node.md b/docs/endpointpolicymanager/installation/knowledgebase/gpoinitialinstall/node.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/gpoinitialinstall/node.md rename to docs/endpointpolicymanager/installation/knowledgebase/gpoinitialinstall/node.md diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/gpoinitialinstall/savesettings.md b/docs/endpointpolicymanager/installation/knowledgebase/gpoinitialinstall/savesettings.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/gpoinitialinstall/savesettings.md rename to docs/endpointpolicymanager/installation/knowledgebase/gpoinitialinstall/savesettings.md diff --git a/docs/endpointpolicymanager/installation/knowledgebase/installandupgrade/_category_.json b/docs/endpointpolicymanager/installation/knowledgebase/installandupgrade/_category_.json new file mode 100644 index 0000000000..a506889fd9 --- /dev/null +++ b/docs/endpointpolicymanager/installation/knowledgebase/installandupgrade/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Install And Upgrade Troubleshooting", + "position": 60, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/installandupgrade/assignmentremovalfailed.md b/docs/endpointpolicymanager/installation/knowledgebase/installandupgrade/assignmentremovalfailed.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/installandupgrade/assignmentremovalfailed.md rename to docs/endpointpolicymanager/installation/knowledgebase/installandupgrade/assignmentremovalfailed.md diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/installandupgrade/computersidersop.md b/docs/endpointpolicymanager/installation/knowledgebase/installandupgrade/computersidersop.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/installandupgrade/computersidersop.md rename to docs/endpointpolicymanager/installation/knowledgebase/installandupgrade/computersidersop.md diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/installandupgrade/gpsvcfailed.md b/docs/endpointpolicymanager/installation/knowledgebase/installandupgrade/gpsvcfailed.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/installandupgrade/gpsvcfailed.md rename to docs/endpointpolicymanager/installation/knowledgebase/installandupgrade/gpsvcfailed.md diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/installandupgrade/newversionissues.md b/docs/endpointpolicymanager/installation/knowledgebase/installandupgrade/newversionissues.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/installandupgrade/newversionissues.md rename to docs/endpointpolicymanager/installation/knowledgebase/installandupgrade/newversionissues.md diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/installandupgrade/slowlogins.md b/docs/endpointpolicymanager/installation/knowledgebase/installandupgrade/slowlogins.md similarity index 93% rename from docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/installandupgrade/slowlogins.md rename to docs/endpointpolicymanager/installation/knowledgebase/installandupgrade/slowlogins.md index 90b154806d..8c031d8a91 100644 --- a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/installandupgrade/slowlogins.md +++ b/docs/endpointpolicymanager/installation/knowledgebase/installandupgrade/slowlogins.md @@ -72,7 +72,7 @@ an older Client Side Extension, we won't ever fix that one. We only ever fix the sure BEFORE YOU CONTINUE that you've tested the problem out with the LATEST Client Side Extension. **Step 2 –** Perform an exclusion to your AntiVirus/Antimalware using -[How must I configure my Anti-virus or system-level software to work with Endpoint Policy Manager CSE?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/antivirussystemsoftware/antivirus.md) +[How must I configure my Anti-virus or system-level software to work with Endpoint Policy Manager CSE?](/docs/endpointpolicymanager/upgrademaintenance/antivirussystemsoftware/antivirus.md) **Step 3 –** Uninstall (not just disable) your AntiVirus/Antimalware. Does that clear it up? @@ -89,7 +89,7 @@ We can take a "first look" at your log files… but there are no guarantees here jump out and just tell us what it is. Do NOT attach this to an EMAIL. You must get an SRX first by emailing support, then, in the AUTORESPONSE, you'll get directions for how to UPLOAD your log files. Here is how to get us log files and results reports (perform EVERY step): -L[Why does my mail anti-virus service claim that the Endpoint Policy Manager download ISO or ZIP has a virus?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/antivirus.md) +L[Why does my mail anti-virus service claim that the Endpoint Policy Manager download ISO or ZIP has a virus?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/antivirus.md) The items above are generally the causes of change and problems. Therefore, to get us close to the goal, your team will have to narrow it down. @@ -98,7 +98,7 @@ One thing to TRY (but this is not a solution, this just narrows it down for us) Policy Manager DRIVER. Sometimes the DRIVER can get in the way of things. Knowing the DRIVER is a problem can be helpful. Only test this out if installing the LATEST Client Side Extension doesn't clear up the -problem.[What can I do if I installed a new CSE version and it's causing problems (slowdowns or other issues?)](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/installandupgrade/newversionissues.md). +problem.[What can I do if I installed a new CSE version and it's causing problems (slowdowns or other issues?)](/docs/endpointpolicymanager/installation/knowledgebase/installandupgrade/newversionissues.md). ## Troubleshooting Scenario 1 (best): Bring up a new machine and triangulate where the problem is @@ -118,7 +118,7 @@ Do not "image" a machine. Bring it up, totally fresh on new hardware / new VM. - If YES, then the problem is likely something in Group Policy; some security setting which is preventing Endpoint Policy Manager from performing it's function. Provide us with PPLOGS and GPRESULT reports from - [How to import GPOs to Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/import.md). Do not miss any + [How to import GPOs to Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/import.md). Do not miss any steps - If NO.. then you need to BUILD UP the machine until you find the cause. - Remember: If this was a problem / bug affecting all customers, we would know it immediately. So @@ -148,7 +148,7 @@ extensions). result? **Step 5 –** Here is how to get us log files and results reports (perform EVERY step): -[What must I send to Endpoint Policy Manager support in order to get the FASTEST support?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/fastsupport.md) +[What must I send to Endpoint Policy Manager support in order to get the FASTEST support?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/fastsupport.md) ## Troubleshooting Scenario 3 (also less good): Bring up a "deployed" machine and install old Endpoint Policy Manager CSEs to reveal the problem @@ -168,4 +168,4 @@ anymore we can look to see what changed on OUR side and then build a new Client version for you to test. **Step 4 –** Here is how to get us log files and results reports (perform EVERY -step):[What must I send to Endpoint Policy Manager support in order to get the FASTEST support?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/fastsupport.md) +step):[What must I send to Endpoint Policy Manager support in order to get the FASTEST support?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/fastsupport.md) diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/installandupgrade/uninstall.md b/docs/endpointpolicymanager/installation/knowledgebase/installandupgrade/uninstall.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/installandupgrade/uninstall.md rename to docs/endpointpolicymanager/installation/knowledgebase/installandupgrade/uninstall.md diff --git a/docs/endpointpolicymanager/installation/knowledgebase/knowledgebase.md b/docs/endpointpolicymanager/installation/knowledgebase/knowledgebase.md new file mode 100644 index 0000000000..066d466118 --- /dev/null +++ b/docs/endpointpolicymanager/installation/knowledgebase/knowledgebase.md @@ -0,0 +1,76 @@ +--- +title: "Knowledge Base" +description: "Knowledge Base" +sidebar_position: 10 +--- + +# Knowledge Base + +See the following Knowledge Base articles for all things installation and upkeep. + +## Method GPO: Initial Install + +- [Does Endpoint Policy Manager admin console need to be installed on Domain Controller (DC)?](/docs/endpointpolicymanager/installation/knowledgebase/gpoinitialinstall/adminconsole.md) +- [I installed the Admin Console MSI, but I don't see the Endpoint Policy Manager node when I go to edit a GPO. Why?](/docs/endpointpolicymanager/installation/knowledgebase/gpoinitialinstall/node.md) +- [What are the two ways that can I install the GPMC on my Admin Station (Server or Windows 10) machine?](/docs/endpointpolicymanager/installation/knowledgebase/gpoinitialinstall/methods.md) +- [When I edit the GPO, the settings don't seem to "stick"](/docs/endpointpolicymanager/installation/knowledgebase/gpoinitialinstall/savesettings.md) + +## Method SCCM: Initial Install (or other systems) + +- [How do I deploy the Endpoint Policy Manager CSE via SCCM (or other systems management system) ?](/docs/endpointpolicymanager/installation/knowledgebase/sccminitialinstall/sccm.md) + +## Method PDQ Deploy (recommended) + +- [Managing Group Policy using Endpoint Policy Manager and PDQ Deploy](/docs/endpointpolicymanager/installation/knowledgebase/methodpdqdeploy/pdqdeploy.md) + +## AntiVirus and other System Software + +- [I want to use Endpoint Policy Managerwith Citrix App Layering (aka Unidesk). At which layer should I implement the Endpoint Policy Manager Client Side Extension?](/docs/endpointpolicymanager/upgrademaintenance/antivirussystemsoftware/citrixapplayering.md) +- [How must I configure my Anti-virus or system-level software to work with Endpoint Policy Manager CSE?](/docs/endpointpolicymanager/upgrademaintenance/antivirussystemsoftware/antivirus.md) +- [Why am I prompted about a Digitally Signed Driver for Endpoint Policy Manager CSE (and how do I work around it)?](/docs/endpointpolicymanager/upgrademaintenance/antivirussystemsoftware/digitallysigneddriver.md) +- [Why won't the Endpoint Policy Manager services start, with an error like (or similar to) "Verify that you have sufficient privileges to start system services."?](/docs/endpointpolicymanager/upgrademaintenance/antivirussystemsoftware/sufficientprivileges.md) + +## Performance Related Questions + +- [I see many instances of the Endpoint Policy Manager Watcher (ppWatcher) service running on my clients, is that normal? And how can I check memory usage?](/docs/endpointpolicymanager/upgrademaintenance/performancequestions/watcherservicememoryusage.md) +- [How would I verify if Endpoint Policy Manager Client Side Extension is / is not causing high or CPU disk slowdowns?](/docs/endpointpolicymanager/upgrademaintenance/performancequestions/cpuslowdown.md) + +## Install and Upgrade Troubleshooting + +- [The CSE won't uninstall or allow in-place upgrade. What should I do?](/docs/endpointpolicymanager/installation/knowledgebase/installandupgrade/uninstall.md) +- [How do I troubleshoot slow logins (or other login problems), user profile issues, explorer.exe or other Windows problems? What if I'm having problems on ONE (or very few PCs)?](/docs/endpointpolicymanager/installation/knowledgebase/installandupgrade/slowlogins.md) +- [What can I do if I installed a new CSE version and it's causing problems (slowdowns or other issues?)](/docs/endpointpolicymanager/installation/knowledgebase/installandupgrade/newversionissues.md) +- [How do I enable a STANDARD USER to see the COMPUTER SIDE RsOP ?](/docs/endpointpolicymanager/installation/knowledgebase/installandupgrade/computersidersop.md) +- [I am getting an error about "GPSVC failed at sign-in". This error occurs exactly one time. What does this mean?](/docs/endpointpolicymanager/installation/knowledgebase/installandupgrade/gpsvcfailed.md) +- [The removal of the assignment of application Endpoint Policy Manager Client-Side Extension (32bit) from policy failed](/docs/endpointpolicymanager/installation/knowledgebase/installandupgrade/assignmentremovalfailed.md) + +## Misc Installation questions + +- [What if I accidentally install the 32 bit version of Endpoint Policy Manager on a 64 bit machine or vice versa?](/docs/endpointpolicymanager/installation/knowledgebase/miscquestions/bitversion.md) +- [Why does Endpoint Policy Manager require a CSE / client installation piece? I want to do it all using what Microsoft ships in the box but don't want to install anything else.](/docs/endpointpolicymanager/installation/knowledgebase/miscquestions/why.md) +- [How can I fix Outlook To-Do bar flashing when GP or Endpoint Policy Manager does a background refresh?](/docs/endpointpolicymanager/installation/knowledgebase/miscquestions/outlook.md) +- [What must I install on Windows 7 to make Endpoint Policy Manager work as expected?](/docs/endpointpolicymanager/installation/knowledgebase/miscquestions/windows7.md) + +## Best Practices / Keeping up to Date with releases + +- [Using Rings to Test and Update the Endpoint Policy Manager Client-Side Extension and/or Cloud Client (And How to Stay Supported)](/docs/endpointpolicymanager/upgrademaintenance/bestpractices/rings.md) +- [What are the Endpoint Policy Manager Build and Version numbers?](/docs/endpointpolicymanager/upgrademaintenance/bestpractices/versions.md) +- [When should I upgrade or not upgrade the Endpoint Policy Manager CSE?](/docs/endpointpolicymanager/upgrademaintenance/bestpractices/frequency.md) +- [How often is Endpoint Policy Manager updated? And, must I update to the latest version? Are all versions supported?](/docs/endpointpolicymanager/upgrademaintenance/bestpractices/frequency_1.md) +- [How to trigger an update of the Endpoint Policy ManagerClient Side Extension and Cloud Client via command line using Endpoint Policy Manager Cloud versus Group Policy (OnPrem) Edition](/docs/endpointpolicymanager/upgrademaintenance/bestpractices/commandline.md) + +## Updating Endpoint Policy Manager with Active Directory / GPOs + +- [How can I roll out the latest Endpoint Policy Manager CSE with Active Directory in a controlled manner using Rings ?](/docs/endpointpolicymanager/installation/knowledgebase/updating/ringsupgrade.md) +- [CSE Autoupdate Update.Config file Usage and Parameters (before CSE 2725)](/docs/endpointpolicymanager/installation/knowledgebase/updating/config.md) +- [How can I use the Endpoint Policy ManagerPowerShell module to know which GPOs have any Endpoint Policy Manager data or directives?](/docs/endpointpolicymanager/installation/knowledgebase/updating/datadirectives.md) + +## Backup and Restore + +- [Endpoint Policy Manager details with GPO contents appear deleted. How can I restore them?](/docs/endpointpolicymanager/installation/knowledgebase/backupandrestore/restoredetails.md) + +## Uninstallation or Rollback of Endpoint Policy Manager + +- [How do I uninstall Endpoint Policy Manager?](/docs/endpointpolicymanager/installation/knowledgebase/uninstallation/uninstall.md) +- [How to Rollback CSE version from newer to older using PowerShell](/docs/endpointpolicymanager/installation/knowledgebase/uninstallation/rollback.md) +- [How can I uninstall the Least Privilege Manager client for MacOS?](/docs/endpointpolicymanager/installation/knowledgebase/uninstallation/uninstall_1.md) diff --git a/docs/endpointpolicymanager/installation/knowledgebase/methodpdqdeploy/_category_.json b/docs/endpointpolicymanager/installation/knowledgebase/methodpdqdeploy/_category_.json new file mode 100644 index 0000000000..5634b9349d --- /dev/null +++ b/docs/endpointpolicymanager/installation/knowledgebase/methodpdqdeploy/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Method PDQ Deploy Recommended", + "position": 30, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/methodpdqdeploy/pdqdeploy.md b/docs/endpointpolicymanager/installation/knowledgebase/methodpdqdeploy/pdqdeploy.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/methodpdqdeploy/pdqdeploy.md rename to docs/endpointpolicymanager/installation/knowledgebase/methodpdqdeploy/pdqdeploy.md diff --git a/docs/endpointpolicymanager/installation/knowledgebase/miscquestions/_category_.json b/docs/endpointpolicymanager/installation/knowledgebase/miscquestions/_category_.json new file mode 100644 index 0000000000..7e8b8f2bd2 --- /dev/null +++ b/docs/endpointpolicymanager/installation/knowledgebase/miscquestions/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Misc Installation Questions", + "position": 70, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/miscquestions/bitversion.md b/docs/endpointpolicymanager/installation/knowledgebase/miscquestions/bitversion.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/miscquestions/bitversion.md rename to docs/endpointpolicymanager/installation/knowledgebase/miscquestions/bitversion.md diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/miscquestions/outlook.md b/docs/endpointpolicymanager/installation/knowledgebase/miscquestions/outlook.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/miscquestions/outlook.md rename to docs/endpointpolicymanager/installation/knowledgebase/miscquestions/outlook.md diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/miscquestions/why.md b/docs/endpointpolicymanager/installation/knowledgebase/miscquestions/why.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/miscquestions/why.md rename to docs/endpointpolicymanager/installation/knowledgebase/miscquestions/why.md diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/miscquestions/windows7.md b/docs/endpointpolicymanager/installation/knowledgebase/miscquestions/windows7.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/miscquestions/windows7.md rename to docs/endpointpolicymanager/installation/knowledgebase/miscquestions/windows7.md diff --git a/docs/endpointpolicymanager/installation/knowledgebase/sccminitialinstall/_category_.json b/docs/endpointpolicymanager/installation/knowledgebase/sccminitialinstall/_category_.json new file mode 100644 index 0000000000..19f3f9f233 --- /dev/null +++ b/docs/endpointpolicymanager/installation/knowledgebase/sccminitialinstall/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Method SCCM Initial Install Or Other Systems", + "position": 20, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/sccminitialinstall/sccm.md b/docs/endpointpolicymanager/installation/knowledgebase/sccminitialinstall/sccm.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/sccminitialinstall/sccm.md rename to docs/endpointpolicymanager/installation/knowledgebase/sccminitialinstall/sccm.md diff --git a/docs/endpointpolicymanager/installation/knowledgebase/uninstallation/_category_.json b/docs/endpointpolicymanager/installation/knowledgebase/uninstallation/_category_.json new file mode 100644 index 0000000000..bc74fae5f9 --- /dev/null +++ b/docs/endpointpolicymanager/installation/knowledgebase/uninstallation/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Uninstallation Or Rollback Of PolicyPak", + "position": 110, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/uninstallation/rollback.md b/docs/endpointpolicymanager/installation/knowledgebase/uninstallation/rollback.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/uninstallation/rollback.md rename to docs/endpointpolicymanager/installation/knowledgebase/uninstallation/rollback.md diff --git a/docs/endpointpolicymanager/installation/knowledgebase/uninstallation/uninstall.md b/docs/endpointpolicymanager/installation/knowledgebase/uninstallation/uninstall.md new file mode 100644 index 0000000000..0361e29170 --- /dev/null +++ b/docs/endpointpolicymanager/installation/knowledgebase/uninstallation/uninstall.md @@ -0,0 +1,51 @@ +--- +title: "How do I uninstall Endpoint Policy Manager?" +description: "How do I uninstall Endpoint Policy Manager?" +sidebar_position: 10 +--- + +# How do I uninstall Endpoint Policy Manager? + +We suggest you read this all the way through before you attempt to uninstall Netwrix Endpoint Policy +Manager (formerly PolicyPak). + +You uninstall Endpoint Policy Manager the same way you installed it, but in reverse. In short, the +steps are: + +**Step 1 –** Delete GPOs which have Endpoint Policy Manager licensing information. + +**Step 2 –** Delete GPOs which have Endpoint Policy Manager directives (or delete the Endpoint +Policy Manager entries within the GPOs.) + +**Step 3 –** Remove the CSE from all client computers. Use Add/Remove Programs to do this manually, +or use your software installation software to perform the removal. + +**Step 4 –** Remove the Endpoint Policy Manager GPMC add-on from your management stations. + +**Step 5 –** Remove the Paks in the Central Store, or, if you used Share Based storage, remove the +share and delete the Pak files. + +Endpoint Policy Manager doesn't leave any trace on your domain, because the directives are contained +within the GPOs. + +That being said, if you merely delete the GPOs and/or remove the CSEs, you might leave data on the +machine. This might be desired or undesired. You should plan accordingly before performing the +removal steps above. + +In order to get revert to work, depending on the component or item type, you may need to pre-set up +your revert process in advance. + +For Endpoint Policy Manager Application Manager and all Group Policy Preferences settings you need +to expressly declare in advance what the revert behavior should be. By default, neither Endpoint +Policy Manager Application Manager nor the Group Policy Preferences will automatically revert when +you uninstall the Client Side Extension. You would be leaving the last written data behind. For more +information, please see +[How do I ensure that settings will revert when the policy no longer applies (by Group Policy, File, or Endpoint Policy Manager Cloud)?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/settingsrevert.md) + +Then, beyond that, most Endpoint Policy Manager specific settings will stop working and let you +continue onward. For more information on this process, please see +[What happens to each component when Endpoint Policy Manager gets unlicensed or the GPO or policy no longer applies?](/docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/components_2.md) + +Finally, there is a specific cosmetic issue with regards to Endpoint Policy Manager Browser Router +removal and Default Browser. For more information on this issue and how to deal with it, please see +[When I unlicense or remove Endpoint Policy ManagerBrowser Router from scope,Endpoint Policy Manager Browser Router Agent still shows as OS "default browser". Why is that and is there a workaround?](/docs/endpointpolicymanager/components/browserrouter/knowledgebase/installation/defaultbrowser.md). diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/uninstallation/uninstall_1.md b/docs/endpointpolicymanager/installation/knowledgebase/uninstallation/uninstall_1.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/uninstallation/uninstall_1.md rename to docs/endpointpolicymanager/installation/knowledgebase/uninstallation/uninstall_1.md diff --git a/docs/endpointpolicymanager/installation/knowledgebase/updating/_category_.json b/docs/endpointpolicymanager/installation/knowledgebase/updating/_category_.json new file mode 100644 index 0000000000..7730b87278 --- /dev/null +++ b/docs/endpointpolicymanager/installation/knowledgebase/updating/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Updating Endpoint Policy Manager With Active Directory GPOs", + "position": 90, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/updating/config.md b/docs/endpointpolicymanager/installation/knowledgebase/updating/config.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/updating/config.md rename to docs/endpointpolicymanager/installation/knowledgebase/updating/config.md diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/updating/datadirectives.md b/docs/endpointpolicymanager/installation/knowledgebase/updating/datadirectives.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/updating/datadirectives.md rename to docs/endpointpolicymanager/installation/knowledgebase/updating/datadirectives.md diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/updating/ringsupgrade.md b/docs/endpointpolicymanager/installation/knowledgebase/updating/ringsupgrade.md similarity index 99% rename from docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/updating/ringsupgrade.md rename to docs/endpointpolicymanager/installation/knowledgebase/updating/ringsupgrade.md index 9ba83f855e..048899d389 100644 --- a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/updating/ringsupgrade.md +++ b/docs/endpointpolicymanager/installation/knowledgebase/updating/ringsupgrade.md @@ -11,7 +11,7 @@ patches. As such, Netwrix Endpoint Policy Manager (formerly PolicyPak) also stro do the same. Please familiarize yourself with this article before continuing: -[Using Rings to Test and Update the Endpoint Policy Manager Client-Side Extension and/or Cloud Client (And How to Stay Supported)](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/bestpractices/rings.md) +[Using Rings to Test and Update the Endpoint Policy Manager Client-Side Extension and/or Cloud Client (And How to Stay Supported)](/docs/endpointpolicymanager/upgrademaintenance/bestpractices/rings.md) If you wish to configure or fine-tune the CSE auto-download process, you may create a file called `update.config`, which must be placed within the Endpoint Policy Manager Central Storage CSE folder, diff --git a/docs/endpointpolicymanager/installation/videolearningcenter/_category_.json b/docs/endpointpolicymanager/installation/videolearningcenter/_category_.json new file mode 100644 index 0000000000..cb657b91c6 --- /dev/null +++ b/docs/endpointpolicymanager/installation/videolearningcenter/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Video Learning Center", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "videolearningcenter" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/installation/videolearningcenter/methodgpoandad/_category_.json b/docs/endpointpolicymanager/installation/videolearningcenter/methodgpoandad/_category_.json new file mode 100644 index 0000000000..2ab35f133d --- /dev/null +++ b/docs/endpointpolicymanager/installation/videolearningcenter/methodgpoandad/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Method GPO And Active Directory Keeping Up To Date", + "position": 10, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/installation/videolearningcenter/methodgpoandad/autoupdate.md b/docs/endpointpolicymanager/installation/videolearningcenter/methodgpoandad/autoupdate.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/installation/videolearningcenter/methodgpoandad/autoupdate.md rename to docs/endpointpolicymanager/installation/videolearningcenter/methodgpoandad/autoupdate.md diff --git a/docs/endpointpolicymanager/installation/videolearningcenter/videolearningcenter.md b/docs/endpointpolicymanager/installation/videolearningcenter/videolearningcenter.md new file mode 100644 index 0000000000..6fe776c873 --- /dev/null +++ b/docs/endpointpolicymanager/installation/videolearningcenter/videolearningcenter.md @@ -0,0 +1,13 @@ +--- +title: "Video Learning Center" +description: "Video Learning Center" +sidebar_position: 20 +--- + +# Video Learning Center + +See the following Video topics for all things installation and upkeep. + +## Method GPO (and Active Directory): Keeping up to date + +- [Auto-updating the CSE](/docs/endpointpolicymanager/installation/videolearningcenter/methodgpoandad/autoupdate.md) diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/_category_.json b/docs/endpointpolicymanager/knowledgebase/applicationmanager/_category_.json deleted file mode 100644 index 36bea70002..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Application Manager", - "position": 200, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/_category_.json b/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/_category_.json deleted file mode 100644 index 78bc685400..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Knowledge Base", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "knowledgebase" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/centralstoresharing/_category_.json b/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/centralstoresharing/_category_.json deleted file mode 100644 index 2adbbec6ef..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/centralstoresharing/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Central Store And Sharing", - "position": 20, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/designstudio/_category_.json b/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/designstudio/_category_.json deleted file mode 100644 index 511aaa08b9..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/designstudio/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Design Studio", - "position": 50, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/_category_.json b/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/_category_.json deleted file mode 100644 index f535bca97b..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "General Configuration And Operation", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/knowledgebase.md b/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/knowledgebase.md deleted file mode 100644 index ed96e9a2df..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/knowledgebase.md +++ /dev/null @@ -1,138 +0,0 @@ ---- -title: "Knowledge Base" -description: "Knowledge Base" -sidebar_position: 10 ---- - -# Knowledge Base - -See the following Knowledge Base articles for Application Manager. - -## General Configuration & Operation - -- [What if I am having trouble getting the Licensing GPO installed?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/gpo.md) -- [What happens to Application Settings Manager settings when the Endpoint Policy Manager license expires / if my company chooses not to renew?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/gpooutofscope.md) -- [Is there an easy way to back up the GPO's I configured with Application Manager?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/gpos.md) -- [Can I Export my GPO settings so that they can be used in the future to create similar GPOs?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/gpos_1.md) -- [How many Endpoint Policy Manager policies can I create within one Group Policy Object?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/limitations.md) -- [We upgraded our DLL files recently after creating a new Pak with Design Studio. After the implementation we would like to revert back to the original Pak. I have a local copy of the former DLL. Can I downgrade to the curre](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/downgrade.md) -- [Application Manager Roles and Responsibilities](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/rolesresponsibilities.md) -- [I deselected the Applock feature, Disable whole tab in target application, but the elements are still grayed out. How can I fix this?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/feature.md) -- [I am selecting values for certain settings for the Lync client. On the Alerts tab, I am selecting and deselecting various radio buttons but none of these selections are being underlined. Why is this?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/lyncclient.md) -- [I am configuring the values for some settings for an application. Many of these settings involve checkmarks which are unchecked by default. How can I tell if an unchecked checkbox is being delivered or not?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/checkmarks.md) -- [How can I use the Endpoint Policy ManagerCentral store (if I was already using the Endpoint Policy Manager Local store?)](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/centralstore.md) -- [How can I keep abreast of the latest Endpoint Policy Manager updates as they are released?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/latestupdates.md) -- [Should I create Endpoint Policy Application Manager policies on the USER or COMPUTER side?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/side.md) -- [What is the difference between running the gp update (Microsoft) and ppupdate (Endpoint Policy Manager) commands?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/updatedcommands.md) -- [Does Application Manager work when the machine is NOT US-English (say, Italian or Russian?)](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/language.md) -- [Can Application Manager help me in pushing, assigning or configuring printers?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/printers.md) -- [Can I deploy the Application Manager settings I've configured as a one-time only deployment like Group Policy Preferences does?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/onetime.md) -- [Are there any required permission settings for a Endpoint Policy ManagerAdministrator to store Endpoint Policy Manager Suite DLL Extensions to the central store?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/permissions.md) -- [Should I backup my Pak files?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/files.md) -- [I'm trying to find a particular font setting in one of your Word Paks but I can't find it. Is the setting not supported?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/fontsetting.md) -- [Is there a particular naming scheme I need to use when compiling my Paks within Design Studio?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/designstudio.md) -- [I need to modify the Pak (DLL file) of one of the applications I control with Application Manager. Will I lose my group policy settings after I modify the DLL file](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/modifydll.md) -- [I installed Design Studio on a Windows 7 Laptop but there are still some XP and Vista stations in our network. Will the Paks I create work for all three operating system?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/designstudiowindows7.md) -- [Should I put lots of Paks (or other PP directives into one GPO?)](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/onegpo.md) -- [How-to gain access of a remote computer using built-in Windows Remote Assistance application?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/windowsremoteassistance.md) -- [How do I upgrade Application Manager when I upgrade my DCs / servers?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/upgrade.md) - -## Central Store and Sharing - -- [Can I store the DLL extensions in a central location AND locally on the machine I create my Paks on and if so which one is utilized?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/centralstoresharing/dllstorage.md) - -## PreConfigured AppSets - -- [Admin Console (Item Level Targeting): Why would I want to bypass Internal (pre-defined) Item Level Targeting?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/bypassinternal.md) -- [Chrome: How to Configure Chrome HomePage using Application Manager](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/home.md) -- [Chrome: How do I manage certificates with Google Chrome?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/certificates.md) -- [Chrome Policies don't appear to work when using Endpoint Policy Manager Cloud.](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/policies.md) -- [Chrome: How do I manage the Proxy settings for Google Chrome?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/proxysettings.md) -- [Chrome: How do I block Local File access to Google Chrome with Endpoint Policy Manager?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/localfileaccess.md) -- [Chrome: Why do I have extra tabs appear when I open Chrome on an endpoint?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/extratabs.md) -- [Chrome: Why Homepage button URL is not working for Google Chrome?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/homebuttonurl.md) -- [Firefox: How do I make Application Settings Manager work with Firefox 115 and later (and how do I transition existing settings?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/transition.md) -- [Firefox: How do I troubleshoot adding Certificates with Endpoint Policy Manager and Firefox?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/certificates_1.md) -- [Firefox: How can I deliver Certificates to "Certificate Authority" store and select "websites", "mail users" and "software makers"?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/authority.md) -- [Firefox: How can I prevent both automatic AND manual updates for Firefox?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/preventupdates.md) -- [Firefox: How can I use Endpoint Policy Manager to revert Firefox's Options back to the "Old Style" ?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/revertoptions.md) -- [Firefox: How do I use the NTLM passthru (URIS) settings in the Firefox / about:config AppSets?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/ntlmpassthru.md) -- [Firefox: What versions of the Endpoint Policy Manager CSE support managing certificates in what versions of Firefox?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/version.md) -- [Firefox: Can I enable / disable add-ons for Firefox?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/addons.md) -- [Firefox: Can I deliver, manage and/or revoke certificates directly to Firefox?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/certificates_2.md) -- [Can I use Security.enterprise_roots.enabled as an alternate method for FF + Certificates?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/securityenterpriseroots.md) -- [Firefox (and Java and Thunderbird): Why can't I seem to find (or perform) UI lockdown for Firefox, Java or Thunderbird ?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/javathunderbird.md) -- [Firefox: Is Endpoint Policy Manager compatible with the Frontmotion packaged MSI version of Firefox?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/frontmotion.md) -- [Firefox: Is Endpoint Policy Manager compatible with Firefox when installed to non-standard (and portable) locations?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/nonstandardlocation.md) -- [Firefox: Is Endpoint Policy Manager compatible with Firefox ESR?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/esr.md) -- [Firefox: How do I set "Allow Now", "Allow and Remember" or "Block Plugin" as plug-ins are requested?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/allowremember.md) -- [Firefox: How do I stop the "Firefox automatically sends some data to Mozilla so that we can improve your experience" message?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/stopsenddatamessage.md) -- [Firefox: How can I fix Dark Theme / Firefox 56 when using Endpoint Policy Manager?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/darktheme.md) -- [Firefox: Why doesn't the Firefox Applications Handler function work as expected?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/applicationshandlerfunction.md) -- [Firefox: Why don't I see Bookmarks and Pop-Ups settings set when user has NEVER run Firefox before?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/bookmarkpopups.md) -- [HowTo: What do I do if I find a problem with a preconfigured AppSet?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/issue.md) -- [HowTo: One of my AppSet entry's settings is not getting delivered on target machines. What should be the first thing to look into?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/entrysettings.md) -- [HowTo: Which "side" of GPO should I deploy AppSets to: User or Computer side?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/side.md) -- [Internet Explorer: I'm trying to use IE 11's Enterprise Mode, but it doesn't appear to be working?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/11enterprisemode.md) -- [Internet Explorer: Can I enable / disable add-ons for Internet Explorer?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/addons_1.md) -- [Internet Explorer: Can I deliver, manage and/or revoke certificates directly to Internet Explorer?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/certificates_3.md) -- [Internet Explorer: How do I deploy custom settings to zones?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/customsettings.md) -- [Internet Explorer: When should I use Compatibility mode vs. Enterprise Mode for IE 11?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/mode.md) -- [Internet Explorer: Why don't HTTP sites get added to the Trusted Site list?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/httpsites.md) -- [Internet Explorer: Why does IE fail to launch after I apply ACL lockdown or all of the IE AppSet STIG settings?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/launchfailstig.md) -- [Internet Explorer: Why Internet Explorer is not launching after I apply "Perform ACL Lockdown"?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/launchfail.md) -- [Java: Using the Pre-configured AppSet for Java, how do I prevent "Java has discovered application components that could indicate a security concern." Pop up?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/securitypopup.md) -- [Java: How to disable prompt "Your Java version is out of date."?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/versionoutofdate.md) -- [Java: How to disable prompt "You Java version is insecure"?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/versioninsecure.md) -- [Java: How to disable Java prompt "Do you want to run this application?"](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/runapplication.md) -- [Java: How to disable User Account Control prompt for Java Auto Updater?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/useraccountcontrol.md) -- [Java: How to disable Task tray notification balloon events?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/tasktray.md) -- [Java: I don't see that any changes are working at all. What can I try first?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/issue_1.md) -- [Java: Java Site List Exceptions just stopped working. What can I do to fix this?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/sitelistexceptions.md) -- [Other: What is "Internal (pre-Defined)" Item Level Targeting?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/internalpredefined.md) -- [Other: Is "Internal Item-Level Targeting" on by default?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/bydefault.md) -- [Other: I added a AppSet and some items are grayed out / not available. In other AppSets, everything seems available. What's happening?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/itemsunavailable.md) -- [AppSets: Why are there some areas of the pre-configured AppSet greyed out or not accessable?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/unavailable.md) -- [AppSets: Why do some AppSets have pre-defined Item Level Targeting for an EXACT version number, and others say "Version 7 to 99" (or similar)?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/versions.md) -- [AppSets: What is the official support policy for the pre-configured AppSets?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/supportpolicy.md) -- [AppSets: How will I know that an existing AppSet will work with the version of the application I have today (and tomorrow)?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/versionsupport.md) -- [AppSets: How often do the AppSets for specific apps get updated?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/updates.md) - -## Virtualized Applications - -- [Do I need to do anything special to get Application Manager to deploy settings to Microsoft App-V Sequences?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/virtualizedapplications/appvsequences.md) -- [A ThinApp throws an "Exception Error". What can I do to fix it?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/virtualizedapplications/exception.md) -- [Which application virtualization platforms are supported?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/virtualizedapplications/applicationvirtualization.md) -- [How can I manage a version of Java inside a ThinApp package ?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/virtualizedapplications/thinapp.md) -- [Are there any additional steps required to integrate Endpoint Policy Manager Software with XenAPP applications?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/virtualizedapplications/xenapp.md) -- [Can Endpoint Policy Manager deliver settings for applications that are provided by XenAPP?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/virtualizedapplications/xenapp_1.md) - -## Design Studio - -- [Besides the installation of Design Studio, are there any additional components I need on my computer in order to create my own AppSets?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/designstudio/designstudioadditional.md) -- [What must I do to prepare for Endpoint Policy Manager Tech Support to assist me with AppSet creation?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/designstudio/creation.md) - -## Troubleshooting - -- [Are there any caveats about removing the Endpoint Policy Manager CSE after it is deployed?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/removeclientsideextension.md) -- [I just upgraded my management station to 785. My LOCAL AppSets are now missing. What happened?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/localmissing.md) -- [Troubleshooting Group Policy Replication Problems](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/replication.md) -- [It appears that Endpoint Policy Manager is processing AppSet entries from another Group Policy Object. How is this possible?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/other.md) -- [Troubleshooting Application Manager – Basic Steps BEFORE calling or emailing Tech Support](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/basicsteps.md) -- [What are the two ways to export AppSet settings and why would I use one over the other?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/appset.md) -- [Which log file should I consult in order to troubleshoot when one or more settings are not getting applied to the Computer?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/settings.md) -- [How do I know if Application Manager is not behaving properly versus the target application not behaving properly?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/applicationissue.md) -- [How is Item Level Targeting handled in reports?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/reports.md) -- [I'm using redirected folders and get un-expected results.](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/redirectedfolder.md) -- [AppLock (UI lockdown) doesn't seem to work on some applications. Why?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/someapplications.md) -- [Endpoint Policy Manager should be reapplying my settings on application launch time. Why doesn't "reapply on launch" work ?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/reapplylaunch.md) -- [Why does Symantec Endpoint Protection (or SEP for Small business) report that Endpoint Policy Manager is "tampering" ?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/symantecendpointprotection.md) -- [Why does Windows Remote Assistance (MSRA) report "PPAppLockdr64.dll is not designed to run on Windows or it contains an error" 0xc000428 ?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/code0xc000428.md) -- [How to use Scripts Manager to workaround the "PPAppLockdr64.dll is either not designed to run on Windows or it contains an error" message when running Microsoft Remote Assistance (MSRA.exe) and the Endpoint Policy Manager CSE is installed on Windows 10 1903](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/microsoftremoteassistance.md) -- [How do I turn AppLock off or on based upon the CSE version I'm using?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/disable.md) -- [How do I turn off "Reapply on Launch" for all applications if asked by tech support?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/reapplylaunchdisable.md) -- [When I use Forcepoint, Firefox takes 15 minutes to open. How can I fix this?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/forcepoint.md) -- [I do not have access or ability to create the Central Store. What should the best practice to store AppSets be?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/storage.md) -- [What happens to Application Settings Manager settings when the Endpoint Policy Manager license expires / if my company chooses not to renew?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/generalconfiguration/gpooutofscope.md) -- [Why does Microsoft 365 Defender report suspicious encoded content in Endpoint Policy Manager Application Settings Manager values?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/microsoftdefender.md) -- [Why do I see "Extra Registry Settings" in Endpoint Policy Manager Application Settings Manager items in the GPMC?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/gpmc.md) diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/_category_.json b/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/_category_.json deleted file mode 100644 index c58ef9c031..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "PreConfigured AppSets", - "position": 30, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/addons_1.md b/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/addons_1.md deleted file mode 100644 index 139f20e9b1..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/addons_1.md +++ /dev/null @@ -1,11 +0,0 @@ ---- -title: "Internet Explorer: Can I enable / disable add-ons for Internet Explorer?" -description: "Internet Explorer: Can I enable / disable add-ons for Internet Explorer?" -sidebar_position: 320 ---- - -# Internet Explorer: Can I enable / disable add-ons for Internet Explorer? - -Yes. Here is a videos to demonstrate that. - -[Manage IE Programs Tab](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/programstab.md) diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/certificates_3.md b/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/certificates_3.md deleted file mode 100644 index 5f52b6444a..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/certificates_3.md +++ /dev/null @@ -1,11 +0,0 @@ ---- -title: "Internet Explorer: Can I deliver, manage and/or revoke certificates directly to Internet Explorer?" -description: "Internet Explorer: Can I deliver, manage and/or revoke certificates directly to Internet Explorer?" -sidebar_position: 330 ---- - -# Internet Explorer: Can I deliver, manage and/or revoke certificates directly to Internet Explorer? - -Yes, Here is a videos to demonstrate that. - -[Manage IE Certificates](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/certificates.md) diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/transition.md b/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/transition.md deleted file mode 100644 index 990665a791..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/transition.md +++ /dev/null @@ -1,340 +0,0 @@ ---- -title: "Firefox: How do I make Application Settings Manager work with Firefox 115 and later (and how do I transition existing settings?" -description: "Firefox: How do I make Application Settings Manager work with Firefox 115 and later (and how do I transition existing settings?" -sidebar_position: 90 ---- - -# Firefox: How do I make Application Settings Manager work with Firefox 115 and later (and how do I transition existing settings? - -This document is only needed for customers using Netwrix Endpoint Policy Manager (formerly -PolicyPak) Application Settings Manager and Firefox ESR. There is no required special workaround for -Endpoint Policy Manager Browser Router except using the latest Endpoint Policy Manager CSE and -Firefox ESR 115 and later. - -Update for 24.11 CSE - -Firefox 128 has made a breaking change requiring an update to the CSE and the Firefox 115 and later -Pak to continue functioning. - -The only supported configuration going forward for Firefox 128 support is CSE 24.11 (or later) and -the Firefox 115 and later pak, which is compiled (and signed) from Netwrix with date stamp 11/7/2024 -and later. - -![transition](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/transition.webp) - -Previous Details (Pre 24.11 CSE) - -Firefox 115 and later has made a breaking change internally which makes our longstanding plug-in -implementation fail to operate. This change is expected to be permanent, and as such required a few -items to workaround and fix it: - -- Changes within Endpoint Policy Manager Application Settings Manager on how we register the Firefox - plug in (requiring an updated CSE) -- The way the AppSet performs its interaction with the CSE -- The AppSet itself which needed to be recompiled with some Endpoint Policy Manager DesignStudio - updates. - -:::note -If you are using the Endpoint Policy Manager DesignStudio yourself to make any changes to -the Firefox 23 AppSet, you will need to re-compile with the latest Endpoint Policy Manager -DesignStudio and then perform the steps listed below. -::: - - -This document is to help guide you through the required transition. - -We will refer to the original Firefox AppSet as FF23 AppSet and the updated one as Firefox AppSet as -FF115. - -You can acquire the updated FireFox AppSet 115 in the Endpoint Policy Manager Portal within the -AppSets downloads. - -:::note -It is recommended, though not strictly required that you also update your management -station to the latest Endpoint Policy Manager MMC snap-in. In doing so the screenshots shown here -will match the steps you will be performing. -::: - - -## Functional Matrix of Firefox, CSE and AppSet - -| Firefox ESR version | CSE Version | AppSet Version Compiled with | Expected Behavior | -| ------------------- | --------------- | ----------------------------------- | ----------------- | -| 102.9 and below | 23.8 and below | 23.8 and below (aka FF23 AppSet) | Works | -| 102.9 and below | 23.10 and later | 23.10 and later (aka FF 115 AppSet) | Works | -| 102.9 and below | 23.8 and below | 23.10 and later (aka FF 115 AppSet) | Not Work | -| 115 and later | 23.10 and later | 23.8 and below (aka FF23 AppSet) | Not Work | -| 115 and later | 23.8 and below | 23.10 and later (aka FF 115 AppSet) | Not Work | -| 115 and later | 23.10 and later | 23.10 and later (aka FF23 AppSet) | Works | - -The upshot is: - -- If you use the new CSE you must use the New AppSet (FF115) -- If you use an older CSE you must use the Older AppSet (FF23) -- Then when you use the new CSE and the New AppSet (FF115), Endpoint Policy Manager will operate as - expected for FF ESR version 102.9 and also FF 115 and later - -Additionally, you will want to ensure that your existing FF23 AppSet policies do not get pushed down -to the machines with the new 23.10 and later CSE. During this guide you will use Item Level -Targeting to ensure that the older FF23 AppSet cannot work with, and shouldn't be applied to newer -CSEs; therefore we need to ensure that the newer FF115 AppSet only applies to the newer CSEs. - -:::note -This document mostly focuses on Group Policy Object delivery of the Firefox Endpoint -Policy Manager AppSet. Note you may have other ways to deliver the FireFox Endpoint Policy Manager -AppSet like Endpoint Policy Manager Cloud, local GPOs, and/or XML data files (via MSI files.) Be -sure to perform this same operation using any and all methods. -::: - - -## Finding all GPOs with Endpoint Policy Manager Application Settings Manager Data - -You'll want to first discover all GPOs with Endpoint Policy Manager Application Settings Manager -Data, and those with specific Firefox 23 AppSets. That being said, automation can only help you -discover which GPOs contain Endpoint Policy Manager Application Settings Manager data. After that, -you must open each Group Policy Object one by one and manually look for FF23 AppSet data. - -Overview of using the Endpoint Policy Manager PowerShell cmdlets to discover Endpoint Policy Manager -data within GPOs see the -[Endpoint Policy Manager User PowerShell to find all Endpoint Policy Manager GPOs](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/powershell.md) -topic for additional information. - -![939_1_image-20231101213809-1_950x372](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_1_image-20231101213809-1_950x372.webp) - -The specific command you'll want to run is Get-PPGPOs -cse "application settings manager". - -Each Group Policy Object at this point will need to be opened to look for Firefox 23 AppSets. Here -is an example of the FF23 AppSet on the Computer side, though it may also reside on the User side. - -![939_2_image-20231101213809-2_950x458](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_2_image-20231101213809-2_950x458.webp) - -Before making any modifications, you'll want to perform a few backup steps which are detailed in the -next section. - -## Backing Up and Testing a Restore - -There are a myriad of ways to recover from a problem during this procedure; and we recommend you -perform all of these steps. - -We strongly recommend before starting the upgrade that you are confident you can backup and also -restore your Endpoint Policy Manager Application Settings Manager and specifically the Firefox -settings before continuing. - -### Back up 1: Viewing the Group Policy Object Report and saving the HTML report. - -![939_3_image-20231101213809-3_950x493](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_3_image-20231101213809-3_950x493.webp) - -This won't be your only backup, but it will express exactly what is in your Group Policy Object with -regards to your settings. - -### Back Up 2: Backing up the Group Policy Object (or all GPOs.) - -For backing up the GPO or all GPOs see the -[Endpoint Policy Manager Application Settings Manager: Backup, Restore, Export, Import](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/upgradingmaintenance/backup.md) -topic for additional information. - -### Back up 3: Export the settings for each FF23 AppSet you already have. - -Open each FF23 AppSet and locate the Options button. Then click Export XML Settings Data and save -the file out. - -![939_4_image-20231101213809-4_950x761](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_4_image-20231101213809-4_950x761.webp) - -See the -[What are the two ways to export AppSet settings and why would I use one over the other?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/appset.md) - -:::note -You will use the resulting XML file in an upcoming step and not only for backup purposes. -::: - - -### Back up 4: Backing up your Firefox 23 AppSet DLL - -Additionally, you should keep handy the OLD Endpoint Policy Manager Firefox 23 App Set DLL file that -you are currently using; and not merely the one still available in the Endpoint Policy Manager -portal. - -The file you are looking for is PP-Firefox23.DLL which is likely in one of three locations: - -- `\Programfiles\PolicyPak\Extensions` or -- SYSVOL (replicated to other domain controllers)\ - `C:\Windows\SYSVOL\sysvol\fabrikam.com\Policies\PolicyPak ` -- A share. (Tip: To locate the share you could be using see the - [Using Shares to Store Your Paks (Share-Based Storage)](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/shares.md)[Using Shares to Store Your Paks (Share-Based Storage)](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/shares.md)) - -So, in summary, before leaving this section and continuing onward, again we advise that you: - -- Have an HTML report of your existing FF23 settings -- Have a backup of the GPO or GPOs which may potentially need to be restored -- Have your exported FF23 AppSet settings XML as per the instructions -- Have your PP-Firefox23.DLL handy that you are already using - -Remember also you might have more than one Group Policy Object with FF23 settings, so be sure to -repeat this procedure for each discovered Group Policy Object with FF23 settings. - -## Adding Item Level Targeting to your Existing FF 23 AppSet policy entry (and optionally testing the ILT evaluation) - -You want to make sure that that your existing Firefox 23 AppSet policy doesn't affect machines with -the newest CSE. As of this writing the version is 23.10.3683 (October of 2023) but could be -different in your download. - -To play it safe, set the ILT evaluation to check for Endpoint Policy Manager CSE version 23.9.0.0 -(September of 2023) and earlier for FF23 and 23.10.0.0 (October of 2023) and later for FF125. - -However, anything EARLIER than this version will support only FF23 AppSet and anything LATER or -EQUAL to this version will support only FF115 AppSet. - -Find your existing FF23 AppSet in your Group Policy Object(s) and select "Edit item-level targeting -filters…" - -![939_5_image-20231101213809-5_950x524](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_5_image-20231101213809-5_950x524.webp) - -You can test for the presence or absence of Endpoint Policy Manager CSE version 23.09.0.0 with a -Registry match query for: - -- Match type: Match value data -- Value data match type: Version match -- Hive: HKEY_Local_Machine -- Key Path: `SOFTWARE\PolicyPak\ClientSide Extensions\{F8357AE4-F4E0-49EC-AE9D-61078938E7CD}` -- Value Name: Version -- Value Type: REG_SZ -- Version Range: GREATER THAN 0.0.0.0 and LESS THAN 23.9.0.0 - -![939_6_image-20231101213809-6_950x743](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_6_image-20231101213809-6_950x743.webp) - -When done save the values. You will know you have ILT set when you see the Targeting column change -to ON. - -![939_7_image-20231101213809-7_950x273](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_7_image-20231101213809-7_950x273.webp) - -This is different than "Predefined Targeting". To understand the difference between ILT and -Predefined Targeting see the -[Predefined ILTs (Internal Filters)](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/designstudio/itemleveltargeting.md) -topic for additional information. - -### Optional: Testing the ILT Filters on FF23 using the Endpoint Policy Manager Item Level Targeting Validation Tool - -Tip: You can also export the FF 23 settings to XMLdata File format and use part of the output to -verify the Item Level Targeting will evaluate to TRUE or FALSE. To do this, right-click the entry -and select Export settings to XMLData file and save the file. Then use the Endpoint Policy Manager -Item Level Targeting Validation tool to test how ILT will operate. See the -[Troubleshooting ILT with the ILT Validator Tool](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/itemleveltargeting.md) -topic for additional information. - -:::note -You will have to trim the ILT part of the output to eliminate the `` at the -beginning and `` at the end. -::: - - -![939_8_image-20231101213809-8_950x453](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_8_image-20231101213809-8_950x453.webp) - -Expected result on a machine with 23.10 and later CSE: - -![939_9_image-20231101213809-9_950x523](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_9_image-20231101213809-9_950x523.webp) - -## Adding the FF 115 AppSet to an existing or new Group Policy Object - -After you download the FF 115 AppSet from the Endpoint Policy Manager portal, it will appear like -this. You only need the .DLL file and not the XML file. - -![939_10_image-20231101213809-10](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_10_image-20231101213809-10.webp) - -Use these instructions to add the AppSet Locally or via Central Store: - -[Working with Others and using the Central Store](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/centralstorework.md) - -Use these instructions to add the AppSet to a Share: - -[Using Shares to Store Your Paks (Share-Based Storage)](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/shares.md) - -![939_11_image-20231101213809-11_950x492](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_11_image-20231101213809-11_950x492.webp) - -For example in the Endpoint Policy Manager Central Store you simply add the pp-Mozilla Firefox -115.DLL. - -:::note -You may leave your existing pp-Mozilla Firefox 23 aboutconfig A to I and J to Z.DLL files -in place without modification. -::: - - -![939_12_image-20231101213809-12_950x406](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_12_image-20231101213809-12_950x406.webp) - -Next time you open the Group Policy editor you should see Endpoint Policy Manager For Mozilla -Firefox 115. - -## Using the FF 115 AppSet - -Now you can create a new entry for the FF 115 AppSet, import the previously exported FF23 settings -into the FF115 AppSet and also set Item Level Targeting on the FF 115 AppSet so it only applies to -computers with the latest Endpoint Policy Manager CSE. - -After creating the entry, double-click into it to open it up and select Import XML Settings Data. - -![939_13_image-20231101213809-13_950x633](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_13_image-20231101213809-13_950x633.webp) - -Then select the previously exported settings from the FF 23 AppSet. You should get a SUCCESS -message. - -Next, set the Item-level targeting in the AppSet. - -![939_14_image-20231101213809-14](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_14_image-20231101213809-14.webp) - -FF AppSet 115 should be applied only to machines with Endpoint Policy Manager CSE version 23.10.3687 -or Greater and can be determined with a Registry match query for: - -- Match type: Match value data -- Value data match type: Version match -- Hive: HKEY_Local_Machine -- Key Path: `SOFTWARE\PolicyPak\ClientSide Extensions\{F8357AE4-F4E0-49EC-AE9D-61078938E7CD}` -- Value Name: Version -- Value Type: REG_SZ -- Version Range: GREATER THAN OR EQUAL TO 23.10.0.0 and LESS THAN 99.0.0.0 - -![939_15_image-20231101213809-15_950x815](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_15_image-20231101213809-15_950x815.webp) - -Click OK and then close the AppSet entry to save it. - -### Optional: Testing the ILT Filters on FF23 using the Endpoint Policy Manager Item Level Targeting Validation Tool - -You can also export the FF 115 settings to XMLdata File format and use part of the output to verify -the Item Level Targeting will evaluate to TRUE or FALSE. To do this, right-click the entry and -select Export settings to XMLData file and save the file. Then use the Endpoint Policy Manager Item -Level Targeting Validation tool to test how ILT will operate. See the -[Troubleshooting ILT with the ILT Validator Tool](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/itemleveltargeting.md) -topic for additional information. - -Note that you will have to trim the ILT part of the output to eliminate the `` at the -beginning and `` at the end. - -You can test the ILT evaluation by using the Export settings to XMLData file for the Mozilla Firefox -115 entry. - -![939_16_image-20231101213809-16_950x543](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_16_image-20231101213809-16_950x543.webp) - -Then you can use the ILT Evaluator tool to ensure your ILT evaluation is properly crafted and the -AppSet will only target machines with the latest Endpoint Policy Manager CSE. - -![939_17_image-20231101213809-17_950x549](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_17_image-20231101213809-17_950x549.webp) - -# HTML Settings Report Manual Comparison - -In one of the backup steps we recommended you export the FF23 GPMC HTML report. At this point you -may also want to double-check the FF115 GPMC report for any discrepancies or omissions in the -export/import process. - -If you don't see an expected value this could be because (1) the FF115 Pak was updated to remove -some values which appear to be unsupported in modern Firefox versions or (2) Some part of the Export -from FF23 and import to FF115 didn't work as expected. - -In such a case as case 2, please manually open the FF115 Pak and manually update your settings to -correct for any non-imported settings. - -![939_18_image-20231101213809-18_950x807](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/939_18_image-20231101213809-18_950x807.webp) - -## Final Thoughts - -In this document you learned how to target the FF23 AppSet to your older CSEs and the FF115 AppSet -to your newer CSEs. You also learned how to export the FF23 settings and migrate them over to the -FF115 AppSet. diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/_category_.json b/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/_category_.json deleted file mode 100644 index 5146a955c3..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/troubleshooting/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Troubleshooting", - "position": 60, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/virtualizedapplications/_category_.json b/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/virtualizedapplications/_category_.json deleted file mode 100644 index a172dc0cfd..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/virtualizedapplications/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Virtualized Applications", - "position": 40, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/_category_.json b/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/_category_.json deleted file mode 100644 index 5e102a37bc..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Video Learning Center", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "videolearningcenter" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/_category_.json b/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/_category_.json deleted file mode 100644 index c15ff67e36..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Central Store And Sharing", - "position": 30, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/chrome/_category_.json b/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/chrome/_category_.json deleted file mode 100644 index 7d65fe8fe4..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/chrome/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Chrome All Videos", - "position": 130, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/citrix/_category_.json b/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/citrix/_category_.json deleted file mode 100644 index 541a4a54b3..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/citrix/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Citrix And Terminal Servers", - "position": 70, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/designstudio/_category_.json b/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/designstudio/_category_.json deleted file mode 100644 index bfa6885e8f..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/designstudio/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "DesignStudio How To", - "position": 60, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/_category_.json b/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/_category_.json deleted file mode 100644 index 870d5f2273..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Features Tech Support And How To", - "position": 40, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/_category_.json b/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/_category_.json deleted file mode 100644 index 717d564d0c..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Firefox All Videos", - "position": 140, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/gettingstarted/_category_.json b/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/gettingstarted/_category_.json deleted file mode 100644 index f402df76f1..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/gettingstarted/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Getting Started", - "position": 20, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/_category_.json b/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/_category_.json deleted file mode 100644 index 157719860d..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Internet Explorer All Videos", - "position": 120, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/java/_category_.json b/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/java/_category_.json deleted file mode 100644 index eb4a11b540..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/java/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Java All Videos", - "position": 150, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/methods/_category_.json b/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/methods/_category_.json deleted file mode 100644 index 7873d531cf..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/methods/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Methods Cloud MDM SCCM PDQ", - "position": 80, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/otherapplications/_category_.json b/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/otherapplications/_category_.json deleted file mode 100644 index 1730e69529..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/otherapplications/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Other Applications All Videos", - "position": 160, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/tipsandtricks/_category_.json b/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/tipsandtricks/_category_.json deleted file mode 100644 index 481698f635..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/tipsandtricks/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Misc Tips And Tricks", - "position": 50, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/troubleshooting/_category_.json b/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/troubleshooting/_category_.json deleted file mode 100644 index d1ef5c80ea..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/troubleshooting/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Troubleshooting", - "position": 110, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/vdi/_category_.json b/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/vdi/_category_.json deleted file mode 100644 index d67337c145..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/vdi/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "VDI", - "position": 90, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/videolearningcenter.md b/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/videolearningcenter.md deleted file mode 100644 index ab779fd047..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/videolearningcenter.md +++ /dev/null @@ -1,160 +0,0 @@ ---- -title: "Video Learning Center" -description: "Video Learning Center" -sidebar_position: 20 ---- - -# Video Learning Center - -See the following Video topics for Application Manager. - -## What does it do (and Why You Need It) - -- [Endpoint Policy Manager Overview Video for Managers](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/whatdoesitdo/managers.md) -- [Endpoint Policy Application Manager Overview](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/whatdoesitdo/pak.md) -- [Endpoint Policy ManagerOn-Premise QuickStart for Endpoint Policy Application Manager](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/whatdoesitdo/onpremise.md) -- [Managing Application Settings on your MDM enrolled machines](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/whatdoesitdo/mdm.md) -- [What is Endpoint Policy Application Manager (Group Policy Edition)](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/whatdoesitdo/grouppolicy.md) -- [What is Endpoint Policy Application Manager (Cloud Edition)](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/whatdoesitdo/cloud.md) - -## Getting Started - -- [Creating the Central Store for Group Policy andEndpoint Policy Manager ](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/gettingstarted/centralstorecreate.md) -- [Updating Endpoint Policy Manager Central Store](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/gettingstarted/centralstoreupdate.md) -- [PPGP Quick Rundown: Application Manager](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/gettingstarted/quickrundown.md) - -## Central Store and Sharing - -- [How to manually update Paks](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/manualupdate.md) -- [Working with Others and using the Central Store](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/centralstorework.md) -- [Using Shares to Store Your Paks (Share-Based Storage)](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/shares.md) -- [Keeping Application Settings Manager and Paks up to date](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/uptodate.md) -- [Understanding and fixing Endpoint Policy Manager DLL Orphans](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/dllorphans.md) -- [Reconnecting DLLs](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/dllreconnect.md) -- [GPOTouch Utility](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/touchutility.md) - -## Features, Tech Support and How-To - -- [Using Item Level Targeting](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/itemleveltargeting.md) -- [Bypassing Internal Item Level Targeting Filters](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/itemleveltargetingbypass.md) -- [ACL Lockdown for Registry Based Applications](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/acllockdown.md) -- [Re-Deploy Settings at application launch](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/applicationlaunch.md) -- [The Superpowers](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/superpowers.md) -- [Using Environment Variables in Paks](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/variables.md) -- [Manage different proxy settings, even when offline](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/featurestechsupport/proxysettings.md) -- [Endpoint Policy Manager Application Setting Manager (Understanding Trusted AppSets)](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/trustedappsets.md) - -## Misc Tips and Tricks - -- [Managing IE Proxy server with Advanced settings](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/tipsandtricks/ieproxyserver.md) -- [Wipe Privdog (and other evil certificates) off your network using Group Policy and Endpoint Policy Manager.](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/tipsandtricks/certificatesevil.md) -- [Endpoint Policy Manager and Invincea Integration Demo](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/tipsandtricks/invincea.md) -- [Manage Firefox Plug-ins Per Website](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/tipsandtricks/firefoxplugins.md) -- [Chrome Revert Tips (Pre-CSE 1260)](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/tipsandtricks/chromerevert.md) -- [Fix Chrome Revert with PP CSE 1260 or later](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/tipsandtricks/chromerevertfix.md) -- [Transitioning to the Universal Oracle Java AppSet (7 thru 9)](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/tipsandtricks/oraclejava.md) -- [PPAM: Convert from 2 to 4 AppSet for Firefox About:Config AppSet](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/tipsandtricks/firefoxabout.md) -- [Deliver pre-configured Bookmarks in Chrome](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/tipsandtricks/chromebookmarks.md) -- [Endpoint Policy Manager App Settings Manager: Finding items in big Paks](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/tipsandtricks/paksbig.md) - -## DesignStudio How-To - -- [Creating Your First Pak using Endpoint Policy Manager Design Studio](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/designstudio/firstpak.md) -- [Use the DesignStudio to import existing registry keys](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/designstudio/importregistry.md) -- [Using DesignStudio to add elements from an alternate UI](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/designstudio/addelements.md) -- [Predefined ILTs (Internal Filters)](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/designstudio/itemleveltargeting.md) -- [Design Studio – FoxIT Printer Settings Tutorial](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/designstudio/foxitprinter.md) -- [Manage Firefox Plug-ins using Endpoint Policy Managerand the Endpoint Policy Manager DesignStudio](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/designstudio/firefox_plugins.md) - -## Citrix & Terminal Servers - -- [Endpoint Policy Manager and Citrix: Webster Seal of Approval](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/citrix/sealapproval.md) -- [Endpoint Policy Manager and Citrix: Better Together.. A quick introduction!](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/citrix/integration.md) -- [Endpoint Policy Manager on Citrix: You Gotta Try This](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/citrix/demo.md) -- [CUGC Connect Endpoint Policy Manager + Citrix Demo You Gotta Try This!](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/citrix/demo2.md) -- [Endpoint Policy Manager enhances XenApp with Group Policy](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/citrix/xenapp.md) -- [Endpoint Policy Manager & Citrix XenDesktop](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/citrix/xendesktop.md) -- [Endpoint Policy Manager and Microsoft RDS and RemoteApp – Better Together to Manage Applications' settings](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/citrix/rds.md) - -## Methods (Cloud, MDM, SCCM, PDQ) - -- [Perform Desktop Lockdown using Microsoft Intune](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/methods/microsoftintune.md) -- [Perform Desktop Lockdown using Microsoft SCCM and Endpoint Policy Manager ](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/methods/sccmsoftwarecenter.md) -- [Endpoint Policy Manager Integrates with Specops Deploy](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/methods/specops.md) -- [Deploy and Manage WinZip with PDQ Deploy and Endpoint Policy Manager ](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/methods/pdqdeploy.md) -- [Deploy and Manage Firefox with PDQ Deploy and Endpoint Policy Manager ](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/methods/pdqdeployfirefox.md) - -## VDI - -- [Endpoint Policy Manager and Microsoft VDI – Better Together to Manage Applications' settings](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/vdi/integration.md) -- [Endpoint Policy Manager and VMWare Horizon View](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/vdi/vmware.md) -- [Endpoint Policy Manager and VMware Horizon View – Dedicated VDI](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/vdi/dedicated.md) -- [Endpoint Policy Manager and VMware Horizon View – Local Mode VDI](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/vdi/localmode.md) -- [Endpoint Policy Manager and VMware Horizon View with ThinApp Assigned Packages](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/vdi/thinapp.md) -- [Endpoint Policy Manager and VMware Horizon Workspace Applications and ThinApp Entitled Packages](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/vdi/thinappworkspace.md) - -## Application Virtualization - -- [Endpoint Policy Manager extends Group Policy to Microsoft App-V](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/virtualization/appv.md) -- [Endpoint Policy Manager & Citrix XenApp](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/virtualization/xenapp.md) -- [Microsoft User Experience Virtualization (UE-V) enhanced by Endpoint Policy Manager ](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/virtualization/uev.md) -- [Manage ThinApp Packages on Physical or VDI machines using Endpoint Policy Manager ](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/virtualization/thinapp.md) -- [Endpoint Policy Manager & Symantec](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/virtualization/symantec.md) -- [Endpoint Policy Manager extends Group Policy to Spoon / Novell ZENworks App Virtualization](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/virtualization/spoonnovell.md) - -## Troubleshooting - -- [Endpoint Policy Manager and "Chrome Incompatible apps"](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/troubleshooting/chrome.md) - -## Internet Explorer (all videos) - -- [Getting Started Managing Internet Explorer](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/gettingstarted.md) -- [Manage IE Certificates](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/certificates.md) -- [Manage IE Connections tab](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/connectionstab.md) -- [Manage IE Content tab](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/contenttab.md) -- [Manage IE General tab](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/generaltab.md) -- [Manage IE Privacy tab](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/privacytab.md) -- [Manage IE Programs Tab](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/programstab.md) -- [Manage Internet Explorer Security tab](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/securitytab.md) -- [Manage Internet Explorer Settings With Endpoint Policy Manager Application Settings Manager](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/settings.md) -- [Managing Favorites in IE](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/favorites.md) - -## Chrome (all videos) - -- [Manage Google Chrome using Group Policy, SCCM or your own management utility](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/chrome/gettingstarted.md) -- [Google Chrome: Clear Browsing History, Cookies, Password, Images and more](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/chrome/clearbrowsing.md) -- [Manage Google Chrome Bookmarks](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/chrome/bookmarks.md) - -## Firefox (all videos) - -- [Manage Firefox using Group Policy, SCCM, or your own management tool](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/gettingstarted.md) -- [Changing the Firefox Default Search Engine in one-click](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/defaultsearch.md) -- [Manage Firefox Pop-Ups and Permissions using Group Policy](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/popups.md) -- [Force Install Firefox Extensions (from URL or file).](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/extensions.md) -- [Manage Firefox Bookmarks](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/bookmarks.md) -- [Remove Firefox's Extra Tabs at First Launch](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/extratabs.md) -- [Disable the following about:config, about:addons, pages, Developer Menu, and any Preferences in one click](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/disable.md) -- [Firefox Remove Specific Elements from about:preferences panel](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/removeelements.md) -- [Manage Firefox Misc Settings and Buttons Using Endpoint Policy Manager ](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/miscsettings.md) -- [Manage Firefox Certificates](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/certificates.md) -- [Change Firefox application handler (like PDF) to Adobe Reader](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/adobe.md) -- [Manage Firefox Add-ons using Group Policy](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/addons.md) -- [How to Add and Remove Bookmarks folders from the Firefox menu and toolbar](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/bookmarksmodify.md) - -## Java (all videos) - -- [How to quickly disable Java, everywhere (in an emergency)](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/java/disable.md) -- [Manage and Lock down Java Site List Exceptions](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/java/lockdown.md) -- [Manage Java JRE Control Panel applet with Group Policy](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/java/jre.md) -- [How to Manage the security slider in Java](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/java/securityslider.md) - -## Other applications (all videos) - -- [Netwrix Endpoint Policy Manager can manage Netwrix Password Secure](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/otherapplications/passwordsecure.md) -- [Managing Teams Settings](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/otherapplications/teams.md) -- [Endpoint Policy Manager for Adobe Acrobat](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/otherapplications/acrobat.md) -- [Endpoint Policy Manager for Adobe Flash Player](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/otherapplications/flashplayer.md) -- [Endpoint Policy Manager for IrfanView](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/otherapplications/irfanview.md) -- [Endpoint Policy Manager for Microsoft Office 2013 and 2016](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/otherapplications/office.md) -- [Endpoint Policy Manager for Microsoft Skype for Business (formerly Lync)](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/otherapplications/skype.md) -- [Endpoint Policy Manager for Thunderbird](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/otherapplications/thunderbird.md) diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/virtualization/_category_.json b/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/virtualization/_category_.json deleted file mode 100644 index a5647db81e..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/virtualization/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Application Virtualization", - "position": 100, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/whatdoesitdo/_category_.json b/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/whatdoesitdo/_category_.json deleted file mode 100644 index 64ad683e0f..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/whatdoesitdo/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "What Does It Do And Why You Need It", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/archive/_category_.json b/docs/endpointpolicymanager/knowledgebase/archive/_category_.json deleted file mode 100644 index c508f90948..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/archive/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Archive", - "position": 220, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/archive/designstudiojava.md b/docs/endpointpolicymanager/knowledgebase/archive/designstudiojava.md deleted file mode 100644 index 0145204cd9..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/archive/designstudiojava.md +++ /dev/null @@ -1,10 +0,0 @@ ---- -title: "Endpoint Policy Manager Using Endpoint Policy Manager DesignStudio to modify the Java Paks for XP" -description: "Endpoint Policy Manager Using Endpoint Policy Manager DesignStudio to modify the Java Paks for XP" -sidebar_position: 175 -hide_title: true ---- - -import DesignStudioJava from '/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/designstudio/designstudiojava.md'; - - \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/archive/overview.md b/docs/endpointpolicymanager/knowledgebase/archive/overview.md deleted file mode 100644 index e2e00aab3e..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/archive/overview.md +++ /dev/null @@ -1,39 +0,0 @@ ---- -title: "Archive" -description: "Archive" -sidebar_position: 220 ---- - -# Archive - -See the following Knowledge Base articles and Video topics that have been archived. This is a list -of archived Knowledge Base articles and video topics. - -- [ADM/X Files – why they cannot prevent user shenanigans](/docs/endpointpolicymanager/knowledgebase/archive/admxfiles.md) -- [Manage Different Users In The Same OU (And Reduce Number of GPOs) With Endpoint Policy Manager ](/docs/endpointpolicymanager/knowledgebase/archive/differentusers.md) -- [Mass Deploy the Endpoint Policy Manager CSE using GPSI](/docs/endpointpolicymanager/knowledgebase/archive/massdeploy.md) -- [Upgrading the CSE using GPSI](/docs/endpointpolicymanager/knowledgebase/archive/upgrading.md) -- [Endpoint Policy Manager: Use the DesignStudio to manage FireFox's about:config settings](/docs/endpointpolicymanager/knowledgebase/archive/designstudiofirefox.md) -- [Deliver Group Policy to Domain Joined and non-Domain Joined machines thru the Cloud](/docs/endpointpolicymanager/knowledgebase/archive/cloud.md) -- [Understanding ADM-ADMX files Tattooing (and what to do about it)](/docs/endpointpolicymanager/knowledgebase/archive/tattooing.md) -- [Endpoint Policy Manager: Manage InfranView using Group Policy, SCCM or your own management utility](/docs/endpointpolicymanager/knowledgebase/archive/infranview.md) -- [Endpoint Policy Manager: Manage Opera Next using Group Policy, SCCM or your own management utility](/docs/endpointpolicymanager/knowledgebase/archive/operanext.md) -- [Endpoint Policy Manager: Manage GoToMeeting using Group Policy, SCCM or your own management utility](/docs/endpointpolicymanager/knowledgebase/archive/gotomeeting.md) -- [Endpoint Policy Manager Configure PARCC Testing Configuration Stations using Endpoint Policy Manager to prevent pop-ups](/docs/endpointpolicymanager/knowledgebase/archive/parcctesting.md) -- [Endpoint Policy Manager: Manage VMware Workstation Hardware and Options](/docs/endpointpolicymanager/knowledgebase/archive/vmware.md) -- [Endpoint Policy Manager: Manage and lockdown a specific VMware Workstation's VMX file settings](/docs/endpointpolicymanager/knowledgebase/archive/vmwarefilesettings.md) -- [Endpoint Policy Manager: Manage Java 7u45 using Group Policy](/docs/endpointpolicymanager/knowledgebase/archive/java.md) -- [Endpoint Policy Manager and VMware Horizon Mirage](/docs/endpointpolicymanager/knowledgebase/archive/vmwarehorizonmirage.md) -- [Lockdown Microsoft Office Suite 2013](/docs/endpointpolicymanager/knowledgebase/archive/office2013.md) -- [Endpoint Policy ManagerPreferences with Endpoint Policy Manager Exporter](/docs/endpointpolicymanager/knowledgebase/archive/preferencesexporter.md) -- [Endpoint Policy Manager Using Endpoint Policy Manager DesignStudio to modify the Java Paks for XP](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/designstudio/designstudiojava.md) -- [Internet Explorer 10 and Internet Explorer Maintenance – the whole story](/docs/endpointpolicymanager/knowledgebase/archive/ie10.md) -- [Nuke mode, and why users can avoid your GPprefs settings](/docs/endpointpolicymanager/knowledgebase/archive/modenuke.md) -- [Endpoint Policy Manager: Manage Acrobat X Pro Using Group Policy](/docs/endpointpolicymanager/knowledgebase/archive/acrobatxpro.md) -- [Endpoint Policy Manager: Manage Internet Explorer (IE9) Using Group Policy](/docs/endpointpolicymanager/knowledgebase/archive/ie9.md) -- [Endpoint Policy Manager supplements VMware View](/docs/endpointpolicymanager/knowledgebase/archive/vmwaresupplements.md) -- [Endpoint Policy Manager: Manage Xenapp applications using Group Policy](/docs/endpointpolicymanager/knowledgebase/archive/xenapp.md) -- [Endpoint Policy Manager 3.5 Applock Update Behavior Change](/docs/endpointpolicymanager/knowledgebase/archive/applock.md) -- [Endpoint Policy Manager and Symantec Workspace Streaming and Virtualization](/docs/endpointpolicymanager/knowledgebase/archive/symantecworkspace.md) -- [The CSE auto-updater feature appears to not be working. What can I do?](/docs/endpointpolicymanager/knowledgebase/archive/autoupdater.md) -- [Group Policy Preferences: Item Level Targeting](/docs/endpointpolicymanager/knowledgebase/archive/itemleveltartgeting.md) diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/_category_.json b/docs/endpointpolicymanager/knowledgebase/browserrouter/_category_.json deleted file mode 100644 index bb82f2f9ee..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/browserrouter/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Browser Router", - "position": 90, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/_category_.json b/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/_category_.json deleted file mode 100644 index 78bc685400..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Knowledge Base", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "knowledgebase" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/installation/_category_.json b/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/installation/_category_.json deleted file mode 100644 index 3a0e054a7d..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/installation/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Installation And Uninstallation", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/knowledgebase.md b/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/knowledgebase.md deleted file mode 100644 index d729ac3f54..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/knowledgebase.md +++ /dev/null @@ -1,62 +0,0 @@ ---- -title: "Knowledge Base" -description: "Knowledge Base" -sidebar_position: 10 ---- - -# Knowledge Base - -The following is a list of Knowledge Base articles for Browser Router. - -## Installation and Uninstallation - -- [Why does Windows 8 and 10 ask me "How do you want to open this?" and how do I make it go away?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/installation/windowsopenprompt.md) -- [I'm using SCCM to deploy the PP CSE. I want to ensure that Internet Explorer is closed during the installation of PPBR to prevent IE questions of users if they are logged in. What should I do?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/installation/preventiequestions.md) -- [I launched IE and saw "PPBRAGENTIExIE_01.dll" or "PPBRExplorerExtension.dll" prompted for the user. What should I do?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/installation/iepromptdll.md) -- [When I unlicense or remove Endpoint Policy ManagerBrowser Router from scope,Endpoint Policy Manager Browser Router Agent still shows as OS "default browser". Why is that and is there a workaround?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/installation/defaultbrowser.md) -- [Why doesn't Endpoint Policy Manager Browser Router routes take effect the first time I log on to Windows 8.1 or Windows 10?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/installation/twologons.md) -- [How-to manually install and enable Endpoint Policy Manager Browser Router (PPBR) extension for Google Chrome?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/installation/chromemanual.md) - -## Troubleshooting - -- [Troubleshooting routing between browsers.](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/betweenbrowsers.md) -- [I'm having a "Browser Router Emergency" or some kind of critical website incompatibility. What can I do?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/criticalwebsiteincompatibility.md) -- [When does Endpoint Policy Manager Browser Router write v1 or v2 Enterprise Mode site lists?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/versions.md) -- [PPBRAgentExeIE_01.DLL error message occurs about Internet Explorer enhanced security. What should I do?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/dllcompatible.md) -- [Endpoint Policy Manager Browser Router removes other Chrome ‘force installed' extensions. How can I work around this?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/forceinstall.md) -- [Why don't routes work from Firefox to other browsers (in Firefox 49+) ?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/firefox.md) -- [Why don't routes work from IE to other browsers?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/fromietootherbrowsers.md) -- [Chrome and Citrix problems](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/citrixproblems.md) -- [Why doesn't Edge to Other browser support work as expected?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/fromedgetootherbrowsers.md) -- [Browser router doesn't seem to work when I use a pattern, and the URL has multiple redirects.](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/pattern.md) -- [What is the Chrome Extension ID for all the published versions of Endpoint Policy Manager Browser Router Client Side Extension?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/chromeextensionid.md) -- [What does it mean when Endpoint Policy Manager Browser Router gives a pop-up saying to contact support to my end-users?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/contactsupport.md) -- [I see the Endpoint Policy Manager Browser Router Chrome Extension is being installed, but it's not active. What can I do?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/extensioninactive.md) -- [How do I revert to "Legacy Browser Router Method & Features" if directed?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/revertlegacy.md) -- [What is the PPBR "Keep original tab open when routing / Experimental Feature" checkbox, and why must I turn it OFF for ALL routes if I'm having trouble with ONE website?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/keeporiginaltab.md) -- [Why is my Wildcard rule not applying to top level WWW site?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/wildcardrule.md) -- [I'm attempting to use an older CSE but routing from Edge / Chrome to other browsers is not working. Why is this?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/routing.md) -- [How do I fix "">Endpoint Policy Manager Browser Router Chromium Extension" was automatically disabled." message in Chrome or Edge?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/automaticallydisabled.md) -- [An older CSE isn't routing from Chrome or Edge to other browsers, because the older CSE isn't downloading the latest Chrome extension. What can I do?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/chromerouting.md) -- [How can I use the only remaining Endpoint Policy Manager published Chrome Extension with my older CSE? (CSE 18.7.1779.937 - 19.12.2283.849)](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/chromeextension.md) -- [How can I stop websites automatically routing to Edge when I expect them to be shown in IE (and/or I get an endless loop). Why is this?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/stop.md) -- [Hyperlinks in Adobe documents do not work when Browser Router is set as the Default Browser](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/adobelinks.md) -- [Why does Endpoint Policy Manager PPExtensionService.exe make a call out to DNS?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/dnscall.md) -- [How to fix the Chrome / Edge Chromium launch issues?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/launch.md) -- [How does Browser Router function when Internet Explorer is removed from the machine?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/removed.md) -- [How to set "Choose which browser opens web links in Office365" so that Browser Router properly routes web links in Outlook](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/office365.md) -- [How to quickly troubleshoot Endpoint Policy Manager Browser Router](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/quick.md) - -## Tips and Tricks - -- [Which variables can I use in the Browser Router Advanced Blocking Message?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/advancedblockingmessage.md) -- [How can I use Endpoint Policy Manager Browser router to force people to always use the SAME browser?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/forcebrowser.md) -- [Is it possible to prevent all Internet websites, but allow just a few? (Blacklist websites, whitelist some?)](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/securityzone.md) -- [What is meant by "Default Browser" within Endpoint Policy Manager Browser router?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/defined.md) -- [How do I suppress the pop-up of the Browser Router Chrome Extension at First run?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/suppresspopup.md) -- [How to remove the Endpoint Policy Manager Browser Router Agent from the list of available Web Browser handlers under Default Apps in Windows 10](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/removeagent.md) -- [Where does Browser Router store user selected browser (and how can I fake it if I need to) in versions 2536 and later?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/useselectablebrowser.md) -- [How to Configure Browser Router to use IE Document Modes in Edge IE TAB](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/browsermode.md) -- [How do I change the default icon for user-created shortcuts for my default browser?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/shortcuticons.md) -- [Does Endpoint Policy Manager Manage Chrome or Edge "Flags"?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/commandlinearguments.md) -- [What is PPBREdgePackage and When is it used?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/edgelegacybrowser.md) diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/_category_.json b/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/_category_.json deleted file mode 100644 index ec873edc2f..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/tipsandtricks/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Tips And Tricks", - "position": 30, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/_category_.json b/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/_category_.json deleted file mode 100644 index d0c808bf1b..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/troubleshooting/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Troubleshooting", - "position": 20, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/_category_.json b/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/_category_.json deleted file mode 100644 index 5e102a37bc..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Video Learning Center", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "videolearningcenter" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/citrixvirtualapps/_category_.json b/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/citrixvirtualapps/_category_.json deleted file mode 100644 index f0194879d1..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/citrixvirtualapps/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Citrix And Virtual Applications", - "position": 30, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/gettingstarted/_category_.json b/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/gettingstarted/_category_.json deleted file mode 100644 index ee7419d8c4..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/gettingstarted/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Getting Started", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/methods/_category_.json b/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/methods/_category_.json deleted file mode 100644 index 7d17261bb8..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/methods/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Methods Cloud MDM And SCCM", - "position": 20, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/_category_.json b/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/_category_.json deleted file mode 100644 index f3e4e87352..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Tips And Tricks", - "position": 40, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/videolearningcenter.md b/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/videolearningcenter.md deleted file mode 100644 index 2cacae299a..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/videolearningcenter.md +++ /dev/null @@ -1,41 +0,0 @@ ---- -title: "Video Learning Center" -description: "Video Learning Center" -sidebar_position: 20 ---- - -# Video Learning Center - -See the following Video topics for Browser Router. - -## Getting started - -- [Ensure users utilize the RIGHT browser for the right website !](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/gettingstarted/rightbrowser.md) -- [Browser Router now with support for MS Edge](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/gettingstarted/edgesupport.md) -- [Block web sites from opening in all browsers.](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/gettingstarted/blockwebsites.md) -- [Endpoint Policy Manager and Edge ‘Special' policies](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/gettingstarted/edgespecial.md) -- [Endpoint Policy Manager Browser Router and Ports](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/gettingstarted/ports.md) -- [Endpoint Policy Manager Browser Router User-Selected Default](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/gettingstarted/userselecteddefault.md) -- [Manage Internet Explorer 11 and Edge Compatibility, Enterprise Modes and IE-in-Edge Mode](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/gettingstarted/ie.md) - -## Methods: Cloud, MDM, and SCCM - -- [Map the Right Website to the Right Browser using your MDM service](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/methods/mdm.md) -- [Use PP Cloud to Manage your browsers and manage your routes to domain joined and non domain joined machines](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/methods/cloud.md) - -## Citrix & Virtual applications - -- [Using PP Browser Router on Citrix or RDS servers with published browser applications](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/citrixvirtualapps/citrix.md) -- [Browser Router with Custom Browsers](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/citrixvirtualapps/custombrowsers.md) - -## Tips and Tricks - -- [Endpoint Policy Manager Browser Router: Set the Windows 10 Default Browser (once) then drift](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/defaultwindows10.md) -- [Browser Router now supports Chrome on Non-Domain Joined machines](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/chromenondomainjoined.md) -- [Force all websites to IE (but have some exceptions)](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/ieforce.md) -- [Use Firefox as default for ALL pages, except some pages](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/firefox.md) -- [Route all sites to Chrome, with some exceptions](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/chrome.md) -- [Route all sites to Edge (with some exceptions)](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/edge.md) -- [Internet Explorer to Endpoint Policy Manager Browser Router Site lists](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/iesitelists.md) -- [Endpoint Policy Manager Browser Router: Internet Explorer in Edge mode](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/ieedgemode.md) -- [Set the links to icons to actually show the default browser.](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/browsericon.md) diff --git a/docs/endpointpolicymanager/knowledgebase/devicemanager/_category_.json b/docs/endpointpolicymanager/knowledgebase/devicemanager/_category_.json deleted file mode 100644 index 267bc35462..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/devicemanager/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Device Manager", - "position": 110, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/devicemanager/knowledgebase/_category_.json b/docs/endpointpolicymanager/knowledgebase/devicemanager/knowledgebase/_category_.json deleted file mode 100644 index 78bc685400..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/devicemanager/knowledgebase/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Knowledge Base", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "knowledgebase" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/devicemanager/knowledgebase/knowledgebase.md b/docs/endpointpolicymanager/knowledgebase/devicemanager/knowledgebase/knowledgebase.md deleted file mode 100644 index 9683a2bb74..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/devicemanager/knowledgebase/knowledgebase.md +++ /dev/null @@ -1,13 +0,0 @@ ---- -title: "Knowledge Base" -description: "Knowledge Base" -sidebar_position: 10 ---- - -# Knowledge Base - -See the following Knowledge Base articles for Device Manager. - -- [How to add Devices when serial numbers contain extra characters in the device instance path](/docs/endpointpolicymanager/knowledgebase/devicemanager/knowledgebase/serialnumber.md) -- [Why can MSIs be installed from a USB drive when the only access granted to users is READ access](/docs/endpointpolicymanager/knowledgebase/devicemanager/knowledgebase/usbdrive.md) -- [What are the registry settings for Device Manager (and how do I reset Device Manager Admin Approval)?](/docs/endpointpolicymanager/knowledgebase/devicemanager/knowledgebase/registry.md) diff --git a/docs/endpointpolicymanager/knowledgebase/devicemanager/knowledgebase/registry.md b/docs/endpointpolicymanager/knowledgebase/devicemanager/knowledgebase/registry.md deleted file mode 100644 index 5a469dae39..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/devicemanager/knowledgebase/registry.md +++ /dev/null @@ -1,64 +0,0 @@ ---- -title: "What are the registry settings for Device Manager (and how do I reset Device Manager Admin Approval)?" -description: "What are the registry settings for Device Manager (and how do I reset Device Manager Admin Approval)?" -sidebar_position: 30 ---- - -# What are the registry settings for Device Manager (and how do I reset Device Manager Admin Approval)? - -On any endpoint, details about what USB and other devices have temporary or permanent access are -stored here: - -HKEY_LOCAL_MACHINE\SOFTWARE\PolicyPak\Client-Side -Extensions\{7FA1BDCB-818A-4EF6-A1B7-EF5F85C2D702}\Admin Approval\ApprovedDevicesStorage - -Here is an example of a device which was approved via the Admin Approval tool. - -![aa1](/images/endpointpolicymanager/device/aa1.webp) - -## To determine the Admin Approval End Time for any device: - -**Step 1 –** Grab the **EndTime** and change to **Decimal**. - -**Step 2 –** Input the **EndTime** into this Powershell script. - -``` -$my_time = 1725537001291 -(([System.DateTimeOffset]::FromUnixTimeMilliseconds($my_time)).DateTime.ToLocalTime()).ToString("s") -``` - -An example can be seen here: - -![aa2](/images/endpointpolicymanager/device/aa2.webp) - -## To Determine the Permissions within the Registry: - -Permission bit flags: - -- READ 0x80000000 -- WRITE 0x40000000 -- EXECUTE 0x20000000 -- ALL 0x10000000 - -For example, for READ+WRITE permissions, the value is 0xC0000000. - -## Resetting the Device Manager Admin Approval Values - -From time to time you may want to reset the values on a machine such that all devices are reset, and -new Admin Approval values may be set in the future. To do this: - -**Step 1 –** Download PSExec from -[https://learn.microsoft.com/en-us/sysinternals/downloads/psexec](https://learn.microsoft.com/en-us/sysinternals/downloads/psexec) - -**Step 2 –** Run CMD as administator - -**Step 3 –** Execute psexec.exe -i -s regedit - -**Step 4 –** As SYSTEM open Regedit. Find HKEY_LOCAL_MACHINE\SOFTWARE\PolicyPak\Client-Side -Extensions\{7FA1BDCB-818A-4EF6-A1B7-EF5F85C2D702}\Admin Approval\ApprovedDevicesStorage - -**Step 5 –** Delete the whole key **ApprovedDevicesStorage** to reset AA approvals for all devices, -or chose a specific one and delete it. - -**Step 6 –** Restart PPExtensionService.exe (aka Netwrix Endpoint Policy Manager (formerly -PolicyPak) Helper Service.) diff --git a/docs/endpointpolicymanager/knowledgebase/devicemanager/knowledgebase/serialnumber.md b/docs/endpointpolicymanager/knowledgebase/devicemanager/knowledgebase/serialnumber.md deleted file mode 100644 index 0385196f01..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/devicemanager/knowledgebase/serialnumber.md +++ /dev/null @@ -1,42 +0,0 @@ ---- -title: "How to add Devices when serial numbers contain extra characters in the device instance path" -description: "How to add Devices when serial numbers contain extra characters in the device instance path" -sidebar_position: 10 ---- - -# How to add Devices when serial numbers contain extra characters in the device instance path - -## Problem - -Some USB devices have trailing extra characters such as &000000 in their serial number when viewed -within the Device instance path. - -Example - -``` -SCSI\Disk&Ven__USB&Prod__SanDisk_3.2Gen1\6&1262c329&0&000000 -``` - -When copying these instance paths to create a policy for this device, the serial numbers are not -correctly applied in the MMC console view. - -![980_2_image-20230725212441-2](/images/endpointpolicymanager/device/980_2_image-20230725212441-2.webp) - -This would not properly target the USB device in question as the serial is configured as **0** in -the policy. - -## Workaround - -Instead of adding the Device Instance Path **As Serial Number**, use **As Instance Path** instead. - -![devicepath](/images/endpointpolicymanager/device/devicepath.webp) - -## Result - -This will result in a configuration that will use the entire Device Instance Path as a whole, -instead of trying to break out the individual parts and force the targeted USB device to get the -permissions as configured in the policy. - -![deviceinstancepath](/images/endpointpolicymanager/device/deviceinstancepath.webp) - -The Device Manager policy now works as expected. diff --git a/docs/endpointpolicymanager/knowledgebase/devicemanager/knowledgebase/usbdrive.md b/docs/endpointpolicymanager/knowledgebase/devicemanager/knowledgebase/usbdrive.md deleted file mode 100644 index 42b28a571f..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/devicemanager/knowledgebase/usbdrive.md +++ /dev/null @@ -1,53 +0,0 @@ ---- -title: "Why can MSIs be installed from a USB drive when the only access granted to users is READ access" -description: "Why can MSIs be installed from a USB drive when the only access granted to users is READ access" -sidebar_position: 20 ---- - -# Why can MSIs be installed from a USB drive when the only access granted to users is READ access - -## Problem - -Users can install MSI (Windows Installer Packages) from a USB drive where they have only been -granted READ access by the Device Manager. - -## Cause - -The Endpoint Policy Manager Device manager is working as expected. You can install an MSI from a USB -drive where the user only has READ access because double-clicking (i.e., launching) an MSI is really -only a READ event by C:\Windows\System32\msiexec.exe, which reads the MSI's database contents and -performs the install. MSIEXEC is doing the executing but only requires READ access to the MSI file -in order to do so. In other words, Endpoint Policy Manager DM is a file filter driver which handles -filters. If you give someone READ access, they have the filter to read the file. Then the MSIEXEC -can pick up the ball and run with it. - -## Possible Resolutions - -In addition to limiting access to the USB drive by using Device Manager, the best way to stop -MSIEXEC is to then use Endpoint Policy Manager Least Privilege Manager (LPM) to block MSIEXEC, since -it is calling the input to the database. - -There are a few ways you can do this using Endpoint Policy Manager Least Privilege Manager: - -1. You can block MSIEXEC directly from an .EXE rule with a DENY Executable policy. - - ![984_1_image-20230725214430-5_950x637](/images/endpointpolicymanager/device/984_1_image-20230725214430-5_950x637.webp) - -2. You can block all .MSIs with a DENY Windows Installer Policy. - - ![984_2_image-20230725214430-6_950x580](/images/endpointpolicymanager/device/984_2_image-20230725214430-6_950x580.webp) - -3. You can turn on Admin Approval. - - ![984_3_image-20230725214430-7_950x691](/images/endpointpolicymanager/device/984_3_image-20230725214430-7_950x691.webp) - -Why is an extra step in Least Privilege Manager needed? Because Endpoint Policy Manager Least -Privilege Manager is a process driver which handles processes. If you specify what to do on a -process level, Endpoint Policy Manager Least Privilege Manager handles it, including elevation and -blocking. - -So, you cannot use Endpoint Policy Manager Device Manager to filter a PROCESS (MSIEXEC), but you -could filter it for NO READ access to files. - -You cannot use Endpoint Policy Manager Least Privilege Manager to filter specific files, but you can -filter it to tell MSIEXEC PROCESS what to do. diff --git a/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/_category_.json b/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/_category_.json deleted file mode 100644 index 5e102a37bc..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Video Learning Center", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "videolearningcenter" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/gettingstarted/_category_.json b/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/gettingstarted/_category_.json deleted file mode 100644 index ee7419d8c4..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/gettingstarted/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Getting Started", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/methods/_category_.json b/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/methods/_category_.json deleted file mode 100644 index 7d17261bb8..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/methods/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Methods Cloud MDM And SCCM", - "position": 20, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/videolearningcenter.md b/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/videolearningcenter.md deleted file mode 100644 index a37c5aabae..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/videolearningcenter.md +++ /dev/null @@ -1,25 +0,0 @@ ---- -title: "Video Learning Center" -description: "Video Learning Center" -sidebar_position: 20 ---- - -# Video Learning Center - -See the following Video topics for Device Manager. - -## Getting Started - -- [Instantly Put the smackdown on USB sticks and CD-ROMs](/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/gettingstarted/usbdrive.md) -- [Allow ONE user (or group) access to USB and/or CD-ROM and DVDs](/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/gettingstarted/usbdriveallowuser.md) -- [Authorize USB Sticks by VENDOR type](/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/gettingstarted/usbdriveallowvendor.md) -- [Permit specific devices by serial number](/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/gettingstarted/serialnumber.md) -- [Restrict access only to Bitlocker drives](/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/gettingstarted/bitlockerdrives.md) -- [Endpoint Policy Device Manager and End-User Emails to Support](/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/gettingstarted/enduser.md) -- [Device Manager Helper Tool](/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/gettingstarted/dmhelpertool.md) -- [Device Manager Admin Approval and Automatic Rules Creation](/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/gettingstarted/dmapprovalautorules.md) - -## Methods: Cloud, MDM and SCCM - -- [Block USB sticks using Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/methods/cloud.md) -- [Block and Allow USB and CD-ROMs with your MDM solution](/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/methods/mdm.md) diff --git a/docs/endpointpolicymanager/knowledgebase/endpointpolicyrdp/_category_.json b/docs/endpointpolicymanager/knowledgebase/endpointpolicyrdp/_category_.json deleted file mode 100644 index dec388d336..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/endpointpolicyrdp/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Endpoint Policy RDP Manager", - "position": 180, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/endpointpolicyrdp/videolearningcenter/_category_.json b/docs/endpointpolicymanager/knowledgebase/endpointpolicyrdp/videolearningcenter/_category_.json deleted file mode 100644 index 8a826b99da..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/endpointpolicyrdp/videolearningcenter/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Video Learning Center", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "videolearningcenter" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/endpointpolicyrdp/videolearningcenter/remoteworkandvdi/_category_.json b/docs/endpointpolicymanager/knowledgebase/endpointpolicyrdp/videolearningcenter/remoteworkandvdi/_category_.json deleted file mode 100644 index fc90d7d6e9..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/endpointpolicyrdp/videolearningcenter/remoteworkandvdi/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Remote Work And VDI Scenarios", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/endpointpolicyrdp/videolearningcenter/videolearningcenter.md b/docs/endpointpolicymanager/knowledgebase/endpointpolicyrdp/videolearningcenter/videolearningcenter.md deleted file mode 100644 index 9f727dbab8..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/endpointpolicyrdp/videolearningcenter/videolearningcenter.md +++ /dev/null @@ -1,16 +0,0 @@ ---- -title: "Video Learning Center" -description: "Video Learning Center" -sidebar_position: 10 ---- - -# Video Learning Center - -See the following Video topics for Endpoint Policy Manager RDP Manager. - -## Remote Work and VDI Scenarios - -- [Create and update .RDP files for end-users for Remote Work and VDI scenarios](/docs/endpointpolicymanager/knowledgebase/endpointpolicyrdp/videolearningcenter/remoteworkandvdi/vdiscenarios.md) -- [Create and update .RDP files for end-users using Endpoint Policy Manager Cloud Edition](/docs/endpointpolicymanager/knowledgebase/endpointpolicyrdp/videolearningcenter/remoteworkandvdi/cloud.md) -- [Create and update .RDP files for end-users using Endpoint Policy Manager MDM Edition](/docs/endpointpolicymanager/knowledgebase/endpointpolicyrdp/videolearningcenter/remoteworkandvdi/mdm.md) -- [Use Item Level Targeting to Deliver Targeted .RDP Files](/docs/endpointpolicymanager/knowledgebase/endpointpolicyrdp/videolearningcenter/remoteworkandvdi/itemleveltargeting.md) diff --git a/docs/endpointpolicymanager/knowledgebase/featuremanager/_category_.json b/docs/endpointpolicymanager/knowledgebase/featuremanager/_category_.json deleted file mode 100644 index c806e4220c..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/featuremanager/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Feature Manager For Windows", - "position": 160, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/featuremanager/knowledgebase/_category_.json b/docs/endpointpolicymanager/knowledgebase/featuremanager/knowledgebase/_category_.json deleted file mode 100644 index 78bc685400..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/featuremanager/knowledgebase/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Knowledge Base", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "knowledgebase" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/featuremanager/knowledgebase/knowledgebase.md b/docs/endpointpolicymanager/knowledgebase/featuremanager/knowledgebase/knowledgebase.md deleted file mode 100644 index b750b31001..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/featuremanager/knowledgebase/knowledgebase.md +++ /dev/null @@ -1,13 +0,0 @@ ---- -title: "Knowledge Base" -description: "Knowledge Base" -sidebar_position: 10 ---- - -# Knowledge Base - -See the following Knowledge Base articles for Feature Manager for Windows. - -## Troubleshooting - -- [Endpoint Policy Feature Manager for Windows doesn't appear to be working and we're getting error code 0x800f0954. What can I try?](/docs/endpointpolicymanager/knowledgebase/featuremanager/knowledgebase/troubleshooting/code0x800f0954.md) diff --git a/docs/endpointpolicymanager/knowledgebase/featuremanager/knowledgebase/troubleshooting/_category_.json b/docs/endpointpolicymanager/knowledgebase/featuremanager/knowledgebase/troubleshooting/_category_.json deleted file mode 100644 index 51f22c0d00..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/featuremanager/knowledgebase/troubleshooting/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Troubleshooting", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/featuremanager/videolearningcenter/_category_.json b/docs/endpointpolicymanager/knowledgebase/featuremanager/videolearningcenter/_category_.json deleted file mode 100644 index 5e102a37bc..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/featuremanager/videolearningcenter/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Video Learning Center", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "videolearningcenter" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/featuremanager/videolearningcenter/allvideos/_category_.json b/docs/endpointpolicymanager/knowledgebase/featuremanager/videolearningcenter/allvideos/_category_.json deleted file mode 100644 index a91d46f556..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/featuremanager/videolearningcenter/allvideos/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "All Videos", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/featuremanager/videolearningcenter/videolearningcenter.md b/docs/endpointpolicymanager/knowledgebase/featuremanager/videolearningcenter/videolearningcenter.md deleted file mode 100644 index ecd16e63fd..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/featuremanager/videolearningcenter/videolearningcenter.md +++ /dev/null @@ -1,16 +0,0 @@ ---- -title: "Video Learning Center" -description: "Video Learning Center" -sidebar_position: 20 ---- - -# Video Learning Center - -See the following Video topics for Scripts and Feature Manager for Windows. - -## All Videos - -- [Feature Manager For Windows](/docs/endpointpolicymanager/knowledgebase/featuremanager/videolearningcenter/allvideos/windows.md) -- [Feature Manager For Windows Servers](/docs/endpointpolicymanager/knowledgebase/featuremanager/videolearningcenter/allvideos/windowsservers.md) -- [Feature Manager for Windows + Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/knowledgebase/featuremanager/videolearningcenter/allvideos/cloud.md) -- [Feature Manager for Windows + MDM](/docs/endpointpolicymanager/knowledgebase/featuremanager/videolearningcenter/allvideos/mdm.md) diff --git a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/_category_.json b/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/_category_.json deleted file mode 100644 index 487a5961d7..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "File Associations Manager", - "position": 80, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/_category_.json b/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/_category_.json deleted file mode 100644 index 78bc685400..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Knowledge Base", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "knowledgebase" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/knowledgebase.md b/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/knowledgebase.md deleted file mode 100644 index f0a978b183..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/knowledgebase.md +++ /dev/null @@ -1,23 +0,0 @@ ---- -title: "Knowledge Base" -description: "Knowledge Base" -sidebar_position: 10 ---- - -# Knowledge Base - -See the following Knowledge Base articles for File Associations Manager. - -## Troubleshooting - -- [Can I use Endpoint Policy ManagerBrowser Router and/or Endpoint Policy Manager File Associations Manager to set the default browser?](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/troubleshooting/defaultbrowser.md) -- [How does PP File Associations Manager merge between GPOs and/or Collections?](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/troubleshooting/gpos.md) -- [What happens if I use MDT, or in-box Group Policy or MDM to set OEMDefaultAssociations.XML BEFORE Endpoint Policy Manager File Associations Manager ?](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/troubleshooting/oemdefaultassociations.md) -- [Why is Browser Router's "Default Browser" or File Associations Manager's configuration not working when I also have a Default Associations Configuration file?](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/troubleshooting/defaultassociationsconfiguration.md) -- [How do I revert to "Legacy File Associations Methods & Features" if directed (especially for LTSB/LTSC)?](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/troubleshooting/legacy.md) - -## Tips and Tricks - -- [How can I make Cortana and other web searches to use system default browser instead of Microsoft Edge?](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/tipsandtricks/cortana.md) -- [How can I associate .HTM files with a specific browser, like Internet Explorer?](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/tipsandtricks/specificbrowser.md) -- [How can I open images with Windows Photo Viewer?](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/tipsandtricks/windowsphotoviewer.md) diff --git a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/tipsandtricks/_category_.json b/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/tipsandtricks/_category_.json deleted file mode 100644 index a6d7d9b805..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/tipsandtricks/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Tips And Tricks", - "position": 20, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/troubleshooting/_category_.json b/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/troubleshooting/_category_.json deleted file mode 100644 index 51f22c0d00..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/troubleshooting/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Troubleshooting", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/troubleshooting/legacy.md b/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/troubleshooting/legacy.md deleted file mode 100644 index 9460fca985..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/troubleshooting/legacy.md +++ /dev/null @@ -1,48 +0,0 @@ ---- -title: "How do I revert to \"Legacy File Associations Methods & Features\" if directed (especially for LTSB/LTSC)?" -description: "How do I revert to \"Legacy File Associations Methods & Features\" if directed (especially for LTSB/LTSC)?" -sidebar_position: 50 ---- - -# How do I revert to "Legacy File Associations Methods & Features" if directed (especially for LTSB/LTSC)? - -If you are having a problem with Netwrix Endpoint Policy Manager (formerly PolicyPak) File -Associations Manager (PPFAM) not working as expected, you may be asked by tech support to "Revert to -Legacy File Assoc Method & Features". - -This might be required if you are attempting to use Endpoint Policy Manager File Associations -Manager on an older version of Windows 10, say, LTSB or LTSC. You can still get Endpoint Policy -Manager File Associations Manager to work, but you must utilize the Legacy behavior. - -First, be sure you are eligible to use this function by copying the latest Endpoint Policy Manager -ADMX files to your Central Store or using Endpoint Policy Manager Cloud. - -Directions for Central Store: -[Troubleshooting with ADMX files](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/admxfiles.md) - -Directions for Endpoint Policy Manager Cloud (if they are not already pre-placed there): -[PolicyPak Cloud: Upload and use your own ADMX files to PolicyPak Cloud](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/admxfiles.md) - -Then, the setting you should use if directed by support is entitled: - -`Computer Configuration | Policies | Admin Templates | PolicyPak ADMX Settings | Client-side Extensions | File Associations Manager | Revert to Legacy File Assoc Method & Features` -and set to Enabled to return back to the legacy behavior. - -![837_1_image-20201027212337-3](/images/endpointpolicymanager/troubleshooting/fileassociations/837_1_image-20201027212337-3.webp) - -## What does "Revert to Legacy File Assoc Method & Features" mean? - -By establishing to use Legacy File Assoc Method & Features the following occurs: - -- Endpoint Policy Manager File Associations Manager policies will ONLY apply on the COMPUTER side. - - :::note - The MMC and/or Cloud editors cannot know you've enabled this setting; and as such - those editors will still work, but the CSE will then ignore the USER side directives. - ::: - - -- Endpoint Policy Manager File Associations Manager policies can only take effect on DOMAIN JOINED - machines. -- Endpoint Policy Manager File Associations Manager policies can only take effect when you log out - and back in. diff --git a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/_category_.json b/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/_category_.json deleted file mode 100644 index 5e102a37bc..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Video Learning Center", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "videolearningcenter" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/gettingstarted/_category_.json b/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/gettingstarted/_category_.json deleted file mode 100644 index ee7419d8c4..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/gettingstarted/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Getting Started", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/methods/_category_.json b/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/methods/_category_.json deleted file mode 100644 index 7bdacf3b44..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/methods/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Methods Cloud MDM SCCM PDQ Etc", - "position": 20, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/tipsandtricks/_category_.json b/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/tipsandtricks/_category_.json deleted file mode 100644 index ec873edc2f..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/tipsandtricks/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Tips And Tricks", - "position": 30, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/videolearningcenter.md b/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/videolearningcenter.md deleted file mode 100644 index 32b8f9bea3..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/videolearningcenter.md +++ /dev/null @@ -1,35 +0,0 @@ ---- -title: "Video Learning Center" -description: "Video Learning Center" -sidebar_position: 20 ---- - -# Video Learning Center - -For more information on File Associations Manager see the following videos. - -## Getting Started - -- [Endpoint Policy Manager File Associations Manager: Manage Windows 10 & 11 File Associations](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/gettingstarted/windows10.md) -- [Endpoint Policy Manager File Associations Manager: Apply once (and drift)](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/gettingstarted/applyonce.md) -- [Associate Programs to Universal Windows Apps (Metro Apps)](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/gettingstarted/universalwindowsapps.md) -- [Manage all File Associations with the PPFAM Wizard](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/gettingstarted/wizard.md) -- [Endpoint Policy Manager File Associations Manager: Use our preconfigured advice](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/gettingstarted/preconfiguredadvice.md) - -## Methods: Cloud, MDM, SCCM, PDQ, etc. - -- [Managing File Associations with an MDM service](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/methods/mdm.md) -- [Endpoint Policy Manager Cloud: Managing File Assocations](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/methods/cloud.md) -- [Setting Default File Associations with Endpoint Policy Manager and PDQ Deploy](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/methods/pdqdeploy.md) -- [Using File Association Manager in the Endpoint Policy Manager Cloud environment](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/methods/cloudusage.md) - -## Tips and Tricks - -- [Force IE to use Adobe Reader for PDFs](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/tipsandtricks/adobereader.md) -- [Endpoint Policy Manager: How to get mailto: to open in Office 365](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/tipsandtricks/mailto.md) -- [Windows 10 File Associations: Set, Change and Remove Easily](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/tipsandtricks/windows10modify.md) -- [File Associations Manager Helper Tool](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/tipsandtricks/helpertool.md) -- [Endpoint Policy Manager File Associations Manager: Understanding the First Login](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/tipsandtricks/firstlogin.md) -- [Endpoint Policy Manager File Associations Manager: Helper Application](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/tipsandtricks/helperapplication.md) -- [Endpoint Policy Manager File Associations Trick: Acro Reader AND Writer](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/tipsandtricks/acroreader.md) -- [Endpoint Policy Manager File Associations: Don't ask questions (even when you did it right)](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/tipsandtricks/windows10questions.md) diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstarted/_category_.json deleted file mode 100644 index 84427c84b2..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Getting Started With Endpoint Policy Manager (Misc)", - "position": 20, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/_category_.json deleted file mode 100644 index 78bc685400..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Knowledge Base", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "knowledgebase" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/changemanagementutilities/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/changemanagementutilities/_category_.json deleted file mode 100644 index 2c62d69eff..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/changemanagementutilities/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Endpoint Policy Manager & Change Management Utilities", - "position": 70, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/gettingstarted/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/gettingstarted/_category_.json deleted file mode 100644 index ee7419d8c4..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/gettingstarted/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Getting Started", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/knowledgebase.md b/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/knowledgebase.md deleted file mode 100644 index 4ae178b013..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/knowledgebase.md +++ /dev/null @@ -1,90 +0,0 @@ ---- -title: "Knowledge Base" -description: "Knowledge Base" -sidebar_position: 10 ---- - -# Knowledge Base - -The following topics can help you getting started with Endpoint Policy Manager (Misc). - -## Getting Started - -- [Endpoint Policy Manager Support and Resources](/docs/endpointpolicymanager/fastest.md) -- [Does Endpoint Policy Manager have a Quick Start Guide?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/gettingstarted/guide.md) -- [Does Endpoint Policy Manager have an Installation Quick Start Guide?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/gettingstarted/guideinstall.md) -- [How has Endpoint Policy Manager Evolved over the years?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/gettingstarted/history.md) -- [How does Endpoint Policy Manager support (and not support) Windows 11?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/gettingstarted/windows11.md) -- [How does Endpoint Policy Manager support (and not support) Windows 7?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/gettingstarted/windows7.md) -- [Endpoint Policy Manager ARM Support Supportability Statement](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/gettingstarted/arm.md) -- [How does Endpoint Policy Managerhandle right-click menus in Windows 11 / Why does "Copy with Endpoint Policy Manager SecureCopy™" always show in Windows 11?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/gettingstarted/rightclick.md) -- [How must I prepare for my Endpoint Policy Manager QuickStart / Onboarding?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/gettingstarted/prepare.md) - -## Tips, Tricks, and FAQs - -- [How can use Item Level Targeting to apply a Group Policy Preferences or Endpoint Policy Manager item when the user is not a member of Domain Admins and also is not a member of the local Admin group?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/applypreferences.md) -- [Is the Security Group Item Level Targeting (ILT) option recursive or not?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/securitygroup.md) -- [Which Endpoint Policy Manager emails can / can't I opt out of ?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/emailoptout.md) -- [How can I use Item Level Targeting to specify a specific Windows 10 build and/or LTSC/LTSB?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/windows11.md) -- [How can I fix MMC display problems when my admin console uses high DPI?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/mmcdisplay.md) -- [How do I make an Item Level Target for Server 2016 or Server 2019 (on-prem, MDM or Endpoint Policy Manager Cloud) ?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/windowsserver2019.md) -- [How can I use Item Level Targeting to query Azure AD Groups?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/entraidgroups.md) -- [Can I use both Endpoint Policy ManagerOn Premise mode and Endpoint Policy Manager Cloud simultaneously? Do they clash?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/onpremisecloud.md) -- [How does Endpoint Policy Manager perform Folder Redirection or OneDrive Known Folder Move (KFM) with Endpoint Policy Manager Group Policy, Endpoint Policy ManagerMDM or Endpoint Policy Manager Cloud?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/folderredirection.md) -- [Can I embed the Endpoint Policy ManagerClient Side Extension and/or Endpoint Policy Manager Cloud client into a master image for VDI, MDT, Ghost, Citrix, etc?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/embedclient.md) -- [Which components within the Endpoint Policy Manager product family will work with what operating system?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/operatingsystem.md) -- [How do I get Azure AD SIDs and use them with Item Level Targeting?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/entraidsids.md) -- [How does Endpoint Policy Manager handle STIGs and/or CIS Benchmarks and/or other 3rd party Advice?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/thirdpartyadvice.md) -- [Are the services installed with Endpoint Policy Manager required? Can I disable them if I'm only using a single component?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/services.md) -- [Which Windows Client and Server are currently supported by Endpoint Policy Manager?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/windows.md) -- [Windows 10 (and Server) Event Logs to Azure Log Analytics Walkthru](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/eventlogs.md) -- [How can I use Item Level Targeting to specify Windows Virtual Desktops (WVD) Multi-session Windows?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/virtualdesktops.md) -- [List of Endpoint Policy Manager Event Categories and IDs](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/eventcategories.md) -- [How do I make an Item Level Target for Windows 10 or Windows 11 endpoints](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/windowsendpoint.md) - -## Portal Questions - -- [How do I create a Secondary (or Accounting) contact within the Portal to enable another person to participate in Endpoint Policy Manager (including downloads, updates, etc.)?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/portalquestions/adduser.md) -- [Two-Factor Authentication in the Endpoint Policy Manager Portal](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/portalquestions/twofactorauthentication.md) -- [Why can't I opt out of Emails when I'm an Endpoint Policy Manager Customer?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/portalquestions/emailoptout.md) -- [How can I use a checksum to validate the Endpoint Policy Manager download?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/portalquestions/cheksum.md) -- [Portal login troubleshooting](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/portalquestions/login.md) -- [Changing a portal users information](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/portalquestions/profileupdate.md) - -## Troubleshooting (General) - -- [What must I send to Endpoint Policy Manager support in order to get the FASTEST support?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/fastsupport.md) -- [Why does my mail anti-virus service claim that the Endpoint Policy Manager download ISO or ZIP has a virus?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/antivirus.md) -- [During CSE installation on a VM the following message is displayed indicating a reboot will be needed](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/clientsideextension.md) -- [What is the processing order of all policies and how are conflicts resolved (and how can I see the final RsOP) of those policies (between GPO, Cloud, XML, etc)?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/conflictresolved.md) -- [Why do I get ">Endpoint Policy ManagerBrowser Router couldn't connect to Endpoint Policy Manager extension service. Please contact support"?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/browserrouter.md) -- [How do I submit a process dump (PROCDUMP) and Process Monitor (PROCMON) capture of a hanging process?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/hangingprocess.md) -- [How do I manually collect logs if PPLOGS as User or Admin does not launch?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/manual.md) -- [How do I ensure that settings will revert when the policy no longer applies (by Group Policy, File, or Endpoint Policy Manager Cloud)?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/settingsrevert.md) -- [What are the services installed by Endpoint Policy Manager?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/services.md) -- [I see many instances of the Endpoint Policy Manager Watcher service running on my clients, is that normal?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/watcherservice.md) -- [What CSEs are contained within Endpoint Policy Manager, what are their CSE GUIDs, and in what release did they appear?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/guids.md) -- [How do I turn on Debug logging if asked?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/debug.md) -- [How do I turn on Item Level Targeting (ILT) logging if asked by Endpoint Policy Manager Tech Support?](/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/troubleshooting/preferences.md) -- [How can I increase the depth of what Endpoint Policy Manager reports (minidump files).](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/minidumpfiles.md) -- [What are the advanced CSE troubleshooting registry debugging items?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/registrydebug.md) -- [How can I present a custom dialog (or no dialog) if Browser Router (or the CSE) stops working or crashes?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/customdialog.md) -- [Troubleshooting Item Level Targeting (ILT) Evaluations when using the Endpoint Policy Manager ILT Engine](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/evaluations.md) -- [How to use ProcMon to track changes over time to specific registry keys](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/procmon.md) -- [How can I use Powershell to automatically say yes to the PPLOGS prompt?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/pplogsprompt.md) -- [Why do I get crashes and blue screens when using Endpoint Policy Manager with Forcepoint DLP?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/forepointdlp.md) - -## Endpoint Policy Manager & Netwrix Auditor - -- [How do I configure the MMC snap-in to open GPOs in Netwrix Auditor?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/netwrixauditor/mmcsnapin.md) -- [How can I minimize or eliminate requests to authenticate to Netwrix Auditor (and what permissions are needed to see Endpoint Policy Manager's Netwrix Auditor Reports?)](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/netwrixauditor/permissions.md) - -## Non-Domain Joined Troubleshooting - -- [Which Endpoint Policy Manager items will not work when the computer is non-domain joined (or the computer is NEVER connected to the Internet)?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/nondomainjoined/limitations.md) -- [Which items in Chrome will, and will not work when non-domain joined?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/nondomainjoined/chrome.md) -- [How to use Scripts Manager to manually install and enable Endpoint Policy Manager Browser Router for new Edge Chromium?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/nondomainjoined/edge.md) - -## Endpoint Policy Manager & Change Management Utilities - -- [Understanding the Difference Between Endpoint Policy Manager and GPO Change Management Tools](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/changemanagementutilities/changemanagementtools.md) diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/netwrixauditor/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/netwrixauditor/_category_.json deleted file mode 100644 index 5b7df2d3a4..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/netwrixauditor/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Endpoint Policy Manager And Netwrix Auditor", - "position": 50, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/nondomainjoined/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/nondomainjoined/_category_.json deleted file mode 100644 index 63d3637b68..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/nondomainjoined/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Non Domain Joined Troubleshooting", - "position": 60, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/portalquestions/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/portalquestions/_category_.json deleted file mode 100644 index cd563a925f..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/portalquestions/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Portal Questions", - "position": 30, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/_category_.json deleted file mode 100644 index c86fe879b8..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Tips Tricks and FAQs", - "position": 20, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/_category_.json deleted file mode 100644 index 3f562314dd..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Troubleshooting General", - "position": 40, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/cameyo/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/cameyo/_category_.json deleted file mode 100644 index a4de37e22b..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/cameyo/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Endpoint Policy Manager and Cameyo", - "position": 80, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/changemanagementutilities/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/changemanagementutilities/_category_.json deleted file mode 100644 index 748b00e550..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/changemanagementutilities/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Endpoint Policy Manager and Change Management Utilities", - "position": 90, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/fslogix/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/fslogix/_category_.json deleted file mode 100644 index e9ab1b47d9..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/fslogix/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Endpoint Policy Manager and FSLogix", - "position": 70, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/gettingstartedmisc/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/gettingstartedmisc/_category_.json deleted file mode 100644 index 3575b7e218..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/gettingstartedmisc/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Getting Started (Misc)", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/methods/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/methods/_category_.json deleted file mode 100644 index a91f018c37..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/methods/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Methods SCCM And Other On Prem Tools Deploying Real Microsoft GPO And Endpoint Policy Manager Settings", - "position": 50, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/netwrixauditor/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/netwrixauditor/_category_.json deleted file mode 100644 index ed4cd8065e..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/netwrixauditor/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Endpoint Policy Manager And Netwrix Auditor", - "position": 40, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/_category_.json deleted file mode 100644 index d0c808bf1b..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Troubleshooting", - "position": 20, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/logs.md b/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/logs.md deleted file mode 100644 index 3c4ec9148f..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/logs.md +++ /dev/null @@ -1,22 +0,0 @@ ---- -title: "Gathering and Uploading Logs" -description: "Gathering and Uploading Logs" -sidebar_position: 20 ---- - -# Gathering and Uploading Logs - -If you are experiencing issues with Netwrix Endpoint Policy Manager (formerly PolicyPak), the first -step is to collect logs for support to review. Follow the steps in this video to correctly gather -logs of the issue so support can troubleshoot it quickly. - - - -See the -[What must I send to Endpoint Policy Manager support in order to get the FASTEST support?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/fastsupport.md) -topic for additional information on current support policies and how to get the fastest support. - -## Troubleshooting Previous Versions of Endpoint Policy Manager - -Use this video for gathering and uploading logs for versions previous to Endpoint Policy Manager -v25.4. diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/upgradingmaintenance/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/upgradingmaintenance/_category_.json deleted file mode 100644 index ade0fd1969..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/upgradingmaintenance/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Upgrading and Maintenance", - "position": 30, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/videolearningcenter.md b/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/videolearningcenter.md deleted file mode 100644 index efe1c6afe5..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/videolearningcenter.md +++ /dev/null @@ -1,82 +0,0 @@ ---- -title: "Video Learning Center" -description: "Video Learning Center" -sidebar_position: 20 ---- - -# Video Learning Center - -See the following Video topics for getting started with Endpoint Policy Manager (Misc). - -## Getting Started (Misc) - -- [Endpoint Policy ManagerPortal: How to download Endpoint Policy Manager and get free training](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/gettingstartedmisc/freetraining.md) -- [Endpoint Policy ManagerSolution Methods: Group Policy, MDM, UEM Tools, and Endpoint Policy Manager Cloud compared.](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/gettingstartedmisc/solutionmethods.md) -- [Endpoint Policy Manager Extras: SID EXPORTER](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/gettingstartedmisc/sidexporter.md) -- [Endpoint Policy Manager CSE and Admin console with ARM machines](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/gettingstartedmisc/arm.md) -- [Endpoint Policy Manager Standalone Editor Introduction](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/gettingstartedmisc/editor.md) - -## Troubleshooting - -- [Troubleshooting with ADMX files](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/admxfiles.md) -- [Gathering and Uploading Logs](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/logs.md) -- [Process Monitor 101](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/processmonitor.md) -- [How to make a GPO backup for us to use atEndpoint Policy Manager ](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/gpobackup.md) -- [Endpoint Policy Manager User PowerShell to find all Endpoint Policy Manager GPOs](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/powershell.md) -- [Endpoint Policy Manager CSE Troubleshooting: Unlicense all components, and re-license the one to isolate](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/unlicense.md) -- [Troubleshooting ILT with the ILT Validator Tool](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/itemleveltargeting.md) -- [Endpoint Policy Manager: Exclude Processes via ADMX](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/admx.md) - -## Upgrading and Maintenance - -- [Endpoint Policy Manager: Backup and Restore Options to Recover from nearly any problem](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/upgradingmaintenance/backupoptions.md) -- [Endpoint Policy Manager Application Settings Manager: Backup, Restore, Export, Import](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/upgradingmaintenance/backup.md) - -## Endpoint Policy Manager & Netwrix Auditor - -- [Endpoint Policy Manager and Netwrix Auditor - Demo](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/netwrixauditor/auditordemo.md) -- [Endpoint Policy Manager and Netwrix Auditor - Setup Steps](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/netwrixauditor/auditorsetup.md) - -## Methods: SCCM (and Other On-prem Tools) - Deploying Real Microsoft GPO and Endpoint Policy Manager Settings - -- [Deploying Endpoint Policy Managerdirectives without Group Policy (Endpoint Policy Manager Exporter Utility)](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/methods/exporterutility.md) -- [Deploy Real Group Policy using SCCM or Other Management System!](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/methods/sccmgrouppolicy.md) -- Deploy Endpoint Policy Manager Settings Using SCCM or Other Management System! - -## Endpoint Policy Manager and Windows Virtual Desktops (WVD) - -- [Endpoint Policy Manager & WVD (Windows Virtual Desktop) Getting Started](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/windowsvirtualdesktops/gettingstarted.md) -- [Endpoint Policy Manager + WVD: Elevate the installation of the Remote Deskop app](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/windowsvirtualdesktops/elevateinstall.md) -- [Endpoint Policy Manager + WVD: Elevate application inside WVD and bypass UAC prompts](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/windowsvirtualdesktops/elevateapplication.md) -- [Endpoint Policy Manager + WVD: Manage the Start Screen and Taskbar](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/windowsvirtualdesktops/startscreen.md) -- [Endpoint Policy Manager + WVD: Manage Applications Settings](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/windowsvirtualdesktops/applicationsettings.md) -- [Endpoint Policy Manager + WVD: Reducing number of GPOs and using "GPOs with Brains"](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/windowsvirtualdesktops/admintemplatemanager.md) -- [Endpoint Policy Manager + WVD: Browser Router ... the right browser for the right website.](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/windowsvirtualdesktops/browserrouter.md) -- [Endpoint Policy Manager + Windows Virtual Desktop .. Better Together Tour](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/windowsvirtualdesktops/tour.md) -- [Endpoint Privilege Manager + Windows Virtual Desktop](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/windowsvirtualdesktops/leastprivilege.md) - -## Endpoint Policy Manager and FSLogix - -- [Endpoint Policy Manager + FSLogix ... Managing your Browsers with App Masking.](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/fslogix/appmasking.md) -- [Endpoint Policy Manager and FSLogix Profiles: Better Together](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/fslogix/profiles.md) -- [Endpoint Policy Manager + FSLogix: Manage the Windows 10 Start Menu](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/fslogix/startmenu.md) -- [Endpoint Policy Manager + FSLogix: Set default browser based upon if the browser is masked or revealed](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/fslogix/browserdefault.md) -- [Endpoint Policy Manager + FSLogix: The Right Browser for the Right Website](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/fslogix/broswerright.md) -- [Endpoint Policy Manager + FSLogix: Setting browser configuration based upon which browser you actually have.](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/fslogix/browserconfiguration.md) -- [Endpoint Policy Manager + FSLogix: Elevating applications when needed (and available by FSLogix)](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/fslogix/elevatingapplications.md) - -## Endpoint Policy Manager & Cameyo - -- [Endpoint Policy Manager + Cameyo: Overcoming UAC prompts for Published Applications](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/cameyo/uacprompts.md) -- [Endpoint Policy Manager Browser Router + Cameyo: Right Browser for the Right Website](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/cameyo/browserright.md) -- [Endpoint Policy Manager and Cameyo: Start Screen and Taskbar Magic Tricks](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/cameyo/startscreen.md) -- [Cameyo and Endpoint Policy Manager Application Settings Manager](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/cameyo/applicationsettings.md) - -## Endpoint Policy Manager & Change Management Utilities - -- [Endpoint Policy Manager MMC: Showing History of items you create](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/changemanagementutilities/history.md) -- [Endpoint Policy Manager and AGPM](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/changemanagementutilities/advancedgrouppolicymanagement.md) -- [Endpoint Policy Manager and Quest's GPOADmin Tool](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/changemanagementutilities/gpoadmintool.md) -- [Endpoint Policy Manager Integrates with NetIQ GPA](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/changemanagementutilities/netiq.md) -- [Endpoint Policy Manager and Quest (ScriptLogic) ActiveAdministrator](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/changemanagementutilities/scriptlogicactiveadministrator.md) -- [Endpoint Policy Manager and SDM CHANGE MANAGER](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/changemanagementutilities/sdmchangemanager.md) diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/windowsvirtualdesktops/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/windowsvirtualdesktops/_category_.json deleted file mode 100644 index becd14716d..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/windowsvirtualdesktops/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Endpoint Policy Manager and Windows Virtual Desktops (WVD)", - "position": 60, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/_category_.json deleted file mode 100644 index c072aa1a5d..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Getting Started With Cloud", - "position": 30, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/_category_.json deleted file mode 100644 index 78bc685400..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Knowledge Base", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "knowledgebase" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/_category_.json deleted file mode 100644 index 1aba3e88d3..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Client Tips Tricks And FAQs", - "position": 70, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/transition.md b/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/transition.md deleted file mode 100644 index 69c8afb9e0..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/transition.md +++ /dev/null @@ -1,10 +0,0 @@ ---- -title: "How do I transition from Endpoint Policy Managerusing Group Policy or SCCM method to Endpoint Policy Manager Cloud" -description: "How do I transition from Endpoint Policy Managerusing Group Policy or SCCM method to Endpoint Policy Manager Cloud" -sidebar_position: 125 -hide_title: true ---- - -import Transition from '/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/gettingstarted/transition.md'; - - \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/_category_.json deleted file mode 100644 index 99d4a80942..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Client Troubleshooting", - "position": 40, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/cloudlicensing/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/cloudlicensing/_category_.json deleted file mode 100644 index e38d1fcdfa..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/cloudlicensing/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Cloud Licensing", - "position": 30, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/cloudportalsecurity/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/cloudportalsecurity/_category_.json deleted file mode 100644 index a9778e34e0..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/cloudportalsecurity/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Cloud Portal Security", - "position": 20, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/cloudportaltroubleshooting/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/cloudportaltroubleshooting/_category_.json deleted file mode 100644 index c88f43e08d..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/cloudportaltroubleshooting/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Cloud Portal Troubleshooting", - "position": 50, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/eventcollection/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/eventcollection/_category_.json deleted file mode 100644 index 5343f8773f..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/eventcollection/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Event Collection", - "position": 80, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/gettingstarted/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/gettingstarted/_category_.json deleted file mode 100644 index ee7419d8c4..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/gettingstarted/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Getting Started", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/gettingstarted/client.md b/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/gettingstarted/client.md deleted file mode 100644 index aeee01d966..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/gettingstarted/client.md +++ /dev/null @@ -1,28 +0,0 @@ ---- -title: "When must I use the Endpoint Policy ManagerCloud Client installer versus the on-prem Endpoint Policy Manager CSE?" -description: "When must I use the Endpoint Policy ManagerCloud Client installer versus the on-prem Endpoint Policy Manager CSE?" -sidebar_position: 20 ---- - -# When must I use the Endpoint Policy ManagerCloud Client installer versus the on-prem Endpoint Policy Manager CSE? - -The Netwrix Endpoint Policy Manager (formerly PolicyPak) Cloud Client is the software you download -to enable a machine to join your instance of Endpoint Policy Manager Cloud, claim a license, and -download policies. - -The Endpoint Policy Manager Cloud Client will also download the Endpoint Policy Manager Client Side -Extension to process of the policies. - -When you install the Endpoint Policy Manager cloud client, the CSE is downloaded from the cloud -service automatically at the same time. - -To keep the Endpoint Policy Manager Cloud Client up to date, as well as the Endpoint Policy Manager -Client Side Extension, you need to be proactive. - -Please see this article for keeping things proactive: - -[https://www.endpointpolicymanager.com/resources/pp-blog/using-rings-to-test-and-update-the-policypak-client-side-extension-and-how-to-stay-supported/](https://www.endpointpolicymanager.com/resources/pp-blog/using-rings-to-test-and-update-the-policypak-client-side-extension-and-how-to-stay-supported/) - -This video also has some important information on how to perform updates: - -[Endpoint Policy Manager Cloud Groups CSE and Cloud Client Small-Scale Testing and Updates](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/groups.md) diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/gettingstarted/transition.md b/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/gettingstarted/transition.md deleted file mode 100644 index b51bfde666..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/gettingstarted/transition.md +++ /dev/null @@ -1,287 +0,0 @@ ---- -title: "How do I transition from Endpoint Policy Managerusing Group Policy or SCCM method to Endpoint Policy Manager Cloud" -description: "How do I transition from Endpoint Policy Managerusing Group Policy or SCCM method to Endpoint Policy Manager Cloud" -sidebar_position: 10 ---- - -# How do I transition from Endpoint Policy Managerusing Group Policy or SCCM method to Endpoint Policy Manager Cloud - -Transitioning from Endpoint Policy Manager using Group Policy or SCCM method to Endpoint Policy -Manager Cloud is very straightforward. - -:::tip -Remember, Once Endpoint Policy Manager settings are created, they are transferable to XML, which -can be used with any method: Group Policy, Intune, SCCM, or Endpoint Policy Manager Cloud. -::: - - -This topic assumes you will have policies in the Group Policy editor and want to transfer them to -Endpoint Policy Manager Cloud. The actual current delivery method you are starting from doesn’t -matter. You can start from Group Policy, SCCM, or an MDM service like Intune and transfer over to -Endpoint Policy Manager Cloud. - -Here is an overview of the steps involved in transitioning an existing investment in Endpoint Policy -Manager with Group Policy or SCCM method over to Endpoint Policy Manager Cloud: - -**Step 1 –** Pre-testing that Endpoint Policy Manager Cloud is working at all with the built-in -policies. - -**Step 2 –** Exporting existing Endpoint Policy Manager settings within Group Policy to XML and -importing them into Endpoint Policy Manager Cloud. - -**Step 3 –** Optional: Backup and Restore entire GPO to Endpoint Policy Manager cloud. - -**Step 4 –** Use In-Cloud Editors to create and update rules. - -**Step 5 –** Using Endpoint Policy Manager Cloud to create company groups and/or use Endpoint Policy -Manager Cloud to Azure connector. - -**Step 6 –** Linking Endpoint Policy Manager Cloud XML to Endpoint Policy Manager Cloud Company -Groups or Azure Groups. - -**Step 7 –** Deploying the Endpoint Policy Manager Cloud Client and/or CSE to endpoints. - -**Step 8 –** Removing existing Group Policy, SCCM or Intune based Endpoint Policy Manager setting -settings from machines - -**Step 9 –** Report using Endpoint Policy Manager Cloud to verify expected settings are achieved. - -**Step 10 –** Keeping Endpoint Policy Manager Cloud computers up to date with client software using -Endpoint Policy Manager Cloud Groups. - -## Pre-testing that Endpoint Policy Manager Cloud is working at all with the built-in policies. - -Start by verifying that your Endpoint Policy Manager Cloud account is generally working. See the -[Endpoint Policy Manager Cloud: QuickStart](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/quickstart.md) topic for additional -information. - -You will be verifying that your Endpoint Policy Manager Cloud account is licensed, operational and -working as expected. - -## Exporting existing Endpoint Policy Manager settings within Group Policy to XML and importing them into Endpoint Policy Manager Cloud. - -Continue to export your existing invested Endpoint Policy Manager settings into XML format. - -You can export one setting at a time like this: - -![941_1_image-20230521113923-1_950x502](/images/endpointpolicymanager/cloud/941_1_image-20230521113923-1_950x502.webp) - -You can export a Collection like this: - -![941_2_image-20230521113923-2_950x589](/images/endpointpolicymanager/cloud/941_2_image-20230521113923-2_950x589.webp) - -Or you can export a whole category like this: - -![941_3_image-20230521113923-3](/images/endpointpolicymanager/cloud/941_3_image-20230521113923-3.webp) - -You can also export settings en-mass across multiple GPOs using the Endpoint Policy Manager Exporter -Utility. The steps to do that are here -[Deploying Endpoint Policy Managerdirectives without Group Policy (Endpoint Policy Manager Exporter Utility)](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/methods/exporterutility.md) - -Then you can upload them straight into Endpoint Policy Manager cloud using the Upload and link a new -XML here. Or you can go to the XML Settings tab (not shown) and also upload them there for later -use. - -![941_4_image-20230521113923-4_950x326](/images/endpointpolicymanager/cloud/941_4_image-20230521113923-4_950x326.webp) - -You may also view the XML in notepad and copy/paste the XML straight into Endpoint Policy Manager -cloud using the same setting, Upload and link a new XML here as seen around the 5 minute and 20 -second mark continuing onward. - -See the -[Endpoint Policy ManagerCloud: How to deploy Endpoint Policy Manager specific settings (using in-cloud editors and exporting from on-prem)](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/endpointpolicymanagersettings.md) topic -for additional information. - -## Optional: Backup and Restore entire GPO to Endpoint Policy Manager cloud - -You might also have a GPO with a lot of settings, which contain Microsoft and/or Endpoint Policy -Manager settings. You can transfer the whole contents of that GPO with a GPO Backup and Endpoint -Policy Manager Cloud Import. - -![941_5_image-20230521113923-5_950x386](/images/endpointpolicymanager/cloud/941_5_image-20230521113923-5_950x386.webp) - -The result will be a de-constructed GPO with all relevant parts as XML, available to re-link later -to Company or Azure groups. - -See the [How to import GPOs to Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/import.md) topic for -additional information. - -## Use In-Cloud Editors to create and update rules (for most policies) - -Now that all your rules are lifted and shifted from GPO Editor to XML to Cloud, you can use the -in-cloud editors to perform most new policy types and edit existing policies. - -![941_6_image-20230521113923-6_950x448](/images/endpointpolicymanager/cloud/941_6_image-20230521113923-6_950x448.webp) - -Here’s an example of how to use the Endpoint Policy Manager Cloud in-cloud editors to create and -edit Endpoint Policy Manager Least Privilege Manager items. - -![941_7_image-20230521113923-7_950x1063](/images/endpointpolicymanager/cloud/941_7_image-20230521113923-7_950x1063.webp) - -See the -[Use Endpoint Policy Manager Cloud to deploy PP Least Privilege Manager rules](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/methods/cloudrules.md) topic -for additional information. - -You are advised to maintain a Windows based MMC editing station for testing because not every -editing function may be available in the Endpoint Policy Manager Cloud editors. Most items are, but -a few are not. Details about Endpoint Policy Manager Cloud and Test Lab Best Practices are here: -Getting Started with Cloud > [Knowledge Base](/docs/endpointpolicymanager/knowledgebase/knowledgebase.md). - -## Using Endpoint Policy Manager Cloud to create company groups and/or use the Endpoint Policy Manager Cloud to Azure connector - -Now you can craft your Company Group assignment and then adding computers to it. - -See the [Working with Groups](/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/computergroups/workingwith.md) topic for additional -information. - -An example of crafting your own Company groups, linking existing XMLs, creating new policies and -Adding/Removing computers from these Company Groups can be seen here. - -![941_8_image-20230521113923-8_950x503](/images/endpointpolicymanager/cloud/941_8_image-20230521113923-8_950x503.webp) - -Another option is the ability to mate your Endpoint Policy Manager Cloud instance with your Azure -Instance and use Azure Groups as well. You can establish a connection between Endpoint Policy -Manager Cloud and Azure using these steps: - -![941_9_image-20230521113923-9_950x491](/images/endpointpolicymanager/cloud/941_9_image-20230521113923-9_950x491.jpeg) - -Then Azure groups will appear at the same level as Company Groups and you can link XML to those -Azure groups. - -![941_10_image-20230521113923-10_950x286](/images/endpointpolicymanager/cloud/941_10_image-20230521113923-10_950x286.jpeg) - -Provided the Endpoint Policy Manager Cloud Client is on the machine (one of the next steps), the -computer will pick up the policies in either the Computer Group or Azure Group. (`PPCLOUD /sync` -will show these details.) - -![941_11_image-20230521113923-11_950x295](/images/endpointpolicymanager/cloud/941_11_image-20230521113923-11_950x295.jpeg) - -## Linking Endpoint Policy Manager Cloud XML to Endpoint Policy Manager Cloud Company Groups or Azure Groups - -Because your XML policies are now uploaded to Endpoint Policy Manager Cloud, you are ready to link -them over to the Company Group or Azure Group of your choice. Remember that Endpoint Policy Manager -Cloud acts nearly the same as on-prem GPO with the following attributes: - -- Groups are like OUs, though a computer may be in two Endpoint Policy Manager Cloud Groups (where - in on-prem AD it may only be in one.) -- Block Inheritance is available -- Enforced is available -- Precedence is available - -See the [Working with Groups](/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/computergroups/workingwith.md) topic for additional -information. - -## Deploying the Endpoint Policy Manager Cloud Client and/or CSE to endpoints - -Now you’re ready to deliver the Endpoint Policy Manager Cloud client to your machines, which will -join the machines to Endpoint Policy Manager Cloud. - -![941_12_image-20230521113923-12_950x461](/images/endpointpolicymanager/cloud/941_12_image-20230521113923-12_950x461.webp) - -:::note -If the machines already have the Endpoint Policy Manager CSE installed, there is no need -to uninstall the Endpoint Policy Manager CSE. It is permitted to pre-install the CSE on the machine -before the Endpoint Policy Manager Cloud client and could actually save you a lot of time during -Endpoint Policy Manager Cloud client rollout. -::: - - -There are a myriad of ways to install the Endpoint Policy Manager Cloud client, since it is just an -MSI. When the Cloud Client is installed it will automatically install the Endpoint Policy Manager -CSE if it is not present on the machine like what’s seen here. - -![941_13_image-20230521113923-13_950x691](/images/endpointpolicymanager/cloud/941_13_image-20230521113923-13_950x691.webp) - -:::note -The machine may also upgrade to a later CSE if a Endpoint Policy Manager Cloud group -dictates a later CSE; but the CSE will never downgrade. (See the last section in this guide for more -details.) -::: - - -Additionally, you may wish to investigate the idea of having computers automatically join the -Endpoint Policy Manager Cloud group of your choice with the Jointoken property. Two videos on that -topic are: - -- [Endpoint Policy Manager Cloud: Automatically Join Groups with JOINTOKEN](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/jointoken.md) -- [Endpoint Policy Manager Cloud + MDM Services: Install Cloud Client + automatically join PPC Groups and get policy.](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/usingwithothermethods/mdm.md) - -:::note -There are some other KB topicswith advanced scenarios on installing the Endpoint Policy -Manager Cloud client for Azure Virtual Desktops, VDI and other scenarios. Please open a ticket at -[Netwrix Support](https://www.netwrix.com/sign_in.html?rf=tickets.html#netwrix-support), if you have -trouble locating those articles. -::: - - -:::note -Here's some command line examples to help install the Endpoint Policy Manager Cloud client -silently. See the -[How do I deploy the Endpoint Policy Manager Cloud Client via command line silently?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/clientsilent.md) topic -for additional information. -::: - - -## Removing existing settings to machines (GPO and Non-GPO method) - -Now you are ready to remove existing policy from machines. This will vary depending on the source -method of deploying policy. - -- For GPO, we recommend unlinking the GPO(s) which have Endpoint Policy Manager / now transferred - settings. Then run `GPupdate  /force`,  then   `GPresult /h out1.html` and ensure the settings you - want are now absent from the Group Policy Results. -- For SCCM and MDM/Intune, perform an uninstall of the wrapped up XMLs / MSIs. You can also verify - the XML settings are removed from your endpoint from the Users or Groups or Computer folder. See - the - [What is the processing order of all policies and how are conflicts resolved (and how can I see the final RsOP) of those policies (between GPO, Cloud, XML, etc)?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/conflictresolved.md) topic - for additional information. - -## Report using Endpoint Policy Manager Cloud to verify expected settings are achieved - -There are two ways to determine if your endpoint(s) got the policies you expected. - -On the client - -Method one is akin to GP update and you simply run `PPCLOUD /sync` (performs a SYNC then displays) -or Endpoint Policy Manager Cloud /status (no sync, just displays), and you can see any specific -machines' current state and policies. - -![941_14_image-20230521113923-14_950x823](/images/endpointpolicymanager/cloud/941_14_image-20230521113923-14_950x823.webp) - -See the [Manually Syncing with PolicyPak Cloud](/docs/endpointpolicymanager/manuals/introductionandquick/cloud/quickstart/verify.md#manually-syncing-with-policypak-cloud) -topic for additional information.[](https://helpcenter.netwrix.com/en-US/bundle/Endpoint Policy -Manager_AppendixE/page/Manually_Syncing_with_Endpoint Policy Manager_Cloud.html) - -On the server - -Additionally, you may mass report upon machines using the Endpoint Policy Manager Cloud reporting -mechanism. - -![941_15_image-20230521113923-15_950x386](/images/endpointpolicymanager/cloud/941_15_image-20230521113923-15_950x386.webp) - -See the [Endpoint Policy Manager Cloud Reporting Demo](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/reports.md) topic for -additional information. - -Either method will inform you if the settings you lifted and shifted to Endpoint Policy Manager -Cloud are now on the endpoint. - -## Keeping Endpoint Policy Manager Cloud Client and Endpoint Policy Manager CSE up to date - -Finally, it is important to keep the Endpoint Policy Manager Cloud Client and the Endpoint Policy -Manager CSE up to date. Endpoint Policy Manager Company Groups control the versions of the Endpoint -Policy Manager Cloud Client and Endpoint Policy Manager CSE. - -![941_16_image-20230521113923-16_950x529](/images/endpointpolicymanager/cloud/941_16_image-20230521113923-16_950x529.webp) - -You should always do small scale testing of upgrades of the Endpoint Policy Manager CSE and Endpoint -Policy Manager Cloud Client version to ensure safety before you roll it out to everyone via the All -group. - -See the -[Using Rings to Test and Update the Endpoint Policy Manager Client-Side Extension and/or Cloud Client (And How to Stay Supported)](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/bestpractices/rings.md) topic -for additional information on the Microsoft Ring methodology, which aligns to Endpoint Policy -Manager best practices. - -See the -[Endpoint Policy Manager Cloud Groups CSE and Cloud Client Small-Scale Testing and Updates](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/groups.md) topic -for additional information on how to perform small scale testing before large scale upgrades. diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/knowledgebase.md b/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/knowledgebase.md deleted file mode 100644 index 40fc7f9611..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/knowledgebase.md +++ /dev/null @@ -1,90 +0,0 @@ ---- -title: "Knowledge Base" -description: "Knowledge Base" -sidebar_position: 10 ---- - -# Knowledge Base - -See the following Knowledge Base articles for getting started with Cloud. - -## Getting Started - -- [How do I transition from Endpoint Policy Managerusing Group Policy or SCCM method to Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/gettingstarted/transition.md) -- [What are the OS requirements for Endpoint Policy Manager Cloud?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/gettingstarted/cloud.md) -- [When must I use the Endpoint Policy ManagerCloud Client installer versus the on-prem Endpoint Policy Manager CSE?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/gettingstarted/client.md) -- [Can I use an Endpoint Policy Manager Cloud installer and license for domain-joined and non-domain joined machines?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/gettingstarted/clientdomainnondomain.md) -- [Is there an "Active Directory Connector" to map on-prem OUs and Groups to Endpoint Policy Manager Cloud?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/gettingstarted/activedirectory.md) -- [What editors are there in Endpoint Policy Manager Cloud (and when would I need a "Fake DC" to do editing?)](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/gettingstarted/fakedc.md) -- [What are the ways I can install the Endpoint Policy Manager Cloud Client on Remote Machines?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/gettingstarted/clientremote.md) -- [How can I best install Endpoint Policy Manager Cloud for remote clients over a slow link/internet connection?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/gettingstarted/slowinternet.md) -- [How do I start credit card billing with Endpoint Policy Manager SaaS Edition?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/gettingstarted/creditcard.md) - -## Cloud Portal Security - -- [What data is stored in Endpoint Policy Manager Cloud, and how is that data safely communicated and stored ?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/cloudportalsecurity/datasafety.md) -- [Endpoint Policy Manager Cloud Portal - Adding new company admins - Quickstart](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/cloudportalsecurity/administrator.md) - -## Cloud Licensing - -- [How is Endpoint Policy Manager Cloud usage counted and calculated toward my True-Up?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/cloudlicensing/usage.md) - -## Client Troubleshooting - -- [How can I see the result of Endpoint Policy Manager Cloud inside the Group Policy Editors?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/grouppolicyeditors.md) -- [Troubleshoot communication from the Cloud Client and Cloud Service](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/servicecommunication.md) -- [How can I see if an Endpoint Policy Manager Cloud joined computer is syncing in the background, even if PPCLOUD /Sync appears to fail?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/syncfail.md) -- [How do I transition from Endpoint Policy ManagerCloud to Endpoint Policy Manager Group Policy Edition?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/transition.md) -- [How must my Proxy Server be configured to allow Endpoint Policy Manager Cloud communication?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/proxyserver.md) -- [How to resolve error message "Could not sync with cloud…" caused by disabling TLS 1.0](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/sync.md) -- [I always use a proxy and the cloud client cannot seem to make contact with the services (see FAQ Item #3 above first.) What else can I try?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/proxyservices.md) -- [I get the message "At least one security token in the message could not be validated" during PPCloud client installation. How do I work around this?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/securitytoken.md) -- [I am getting an error about "GPSVC failed at sign-in". This error occurs exactly one time. What does this mean?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/installandupgrade/gpsvcfailed.md) -- [I'm using Cisco Anyconnect and all the computers I register via Endpoint Policy Manager Cloud are being overwritten. Why is this and what can I do?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/ciscoanyconnect.md) -- [My cloud client lost it's join to Endpoint Policy Manager Cloud , and a re-install of the cloud MSI I previously downloaded isn't working / re-syncing. What should I do?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/autoupdates.md) -- [Endpoint Policy Manager Cloud Client: Why are computers appearing in WAITING LIST and how can I fix it?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/waitinglist.md) -- [Endpoint Policy Manager Cloud shows "The license certificate has expired". Why is this?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/expired.md) -- [Two-factor Authentication: You're not receiving code for email-based two-factor authentication](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/twofactorauthenticationcode.md) -- [What happens if there is an outage on Endpoint Policy Manager Cloud ?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/outage.md) -- [What is the Endpoint Policy Manager Cloud client installation error "The remote certificate is invalid according to the validation procedure."](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/invalidcertificate.md) -- [When rolling out Endpoint Policy Manager Cloud, the Client Side Extension does not get installed with the Cloud Client on initial rollout](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/clientsideextension.md) -- [Why do I see duplicate computer entries in Endpoint Policy Manager Cloud (Or, what is Loose, Strict and Advanced Registration)?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/registrationmode.md) -- [The Incorrect (non-matching) version of PPPUPDATE is installed on a PPC endpoint](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/versions.md) -- [How to enable verbose MSIEXEC logging for the installation of Endpoint Policy Manager Cloud Client MSI/Client Side Extension MSI?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/verbose.md) -- [Understanding and working within Endpoint Policy Manager Clouds Computer registration limit.](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/registrationlimit.md) -- [My Endpoint Policy Manager Cloud Client or Client Side Extension isn't completing the installation; How do I fix it?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttroubleshooting/incomplete.md) - -## Cloud Portal Troubleshooting - -- [How do I fully reset my Azure AD connection between Azure and Endpoint Policy Manager Cloud to start over?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/cloudportaltroubleshooting/entraid.md) - -## Mac Integration - -- [What are the step by step instructions to install the MacOS Client for Endpoint Policy Manager Cloud manually?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/macintegration/client.md) -- [How to get signature info from pkg installer?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/macintegration/signature.md) -- [Where are log files for the Endpoint Policy Manager MacOS?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/macintegration/mac.md) -- [How to get SHA of the package](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/macintegration/sha.md) -- [How to get SigningID of the package?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/macintegration/signingid.md) - -## Client Tips, Tricks, and FAQs - -- [What are the most common questions about editing policies using the Endpoint Policy ManagerCloud policy editor (instead of using the MMC to upload to Endpoint Policy Manager Cloud?)](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/edit.md) -- [How to remove (unlink) all Example policies at once from the All-Built-in Group](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/unlink.md) -- [How to use Remote Work Delivery Manager to apply Firewall policies](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/remoteworkdeliverymanager.md) -- [If I want to totally stop using Endpoint Policy ManagerCloud on an endpoint, how would I remove the Endpoint Policy Manager Cloud client pieces remotely?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/removeendpoint.md) -- [How often does the Endpoint Policy Manager cloud client pull down new or updated directives?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/updatefrequency.md) -- [When does Endpoint Policy Managersync to Endpoint Policy Manager Cloud?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/syncfrequency.md) -- [How do I configure Security Settings | Public Key Policies using Endpoint Policy Manager Cloud?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/publickeypoliciessettings.md) -- [Printers won't come back once removed by user](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/printers.md) -- [Using Targeting Editor in Endpoint Policy Manager Cloud Settings](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/targetingeditor.md) -- [How to install the Endpoint Policy Manager Cloud Client for use in an Azure Virtual Desktop image](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/azurevirutaldesktop.md) -- [How to install and configure the PPC Client for a Non-Persistent VDI Image in VMware Horizon](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/vdisolutions.md) -- [How do I deploy the Endpoint Policy Manager Cloud Client via command line silently?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/clientsilent.md) -- [Are Endpoint Policy Manager Cloud policies processed on User or Computer side (and why do I only sometimes see User or Computer side ILT?)](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/type.md) -- [How can I move a computer from one Endpoint Policy Manager Cloud group to another via command line?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/groups.md) -- [How to find which PPCloud Client version & CSE version a registered computer is running from within the Endpoint Policy Manager Cloud portal](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/version.md) - -## Event Collection - -- [How can I keep the same or specify different parameters for Event Collection for child groups? How does a computer behave if a member of multiple groups?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/eventcollection/childgroups.md) -- [ Endpoint Policy Manager Cloud Event Forwarding to Splunk](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/eventcollection/splunk.md) diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/macintegration/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/macintegration/_category_.json deleted file mode 100644 index 25c07553ac..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/macintegration/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Mac Integration", - "position": 60, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/_category_.json deleted file mode 100644 index 5e102a37bc..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Video Learning Center", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "videolearningcenter" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/_category_.json deleted file mode 100644 index ee7419d8c4..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Getting Started", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/security/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/security/_category_.json deleted file mode 100644 index c712017dac..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/security/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Security", - "position": 40, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/testlabbestpractices/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/testlabbestpractices/_category_.json deleted file mode 100644 index eab16522d8..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/testlabbestpractices/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Test Lab Best Practices", - "position": 20, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/tipsandtricks/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/tipsandtricks/_category_.json deleted file mode 100644 index a6b1131336..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/tipsandtricks/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Tips And Tricks", - "position": 50, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/_category_.json deleted file mode 100644 index 242272f954..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Upkeep And Daily Use", - "position": 60, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/usingwithothermethods/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/usingwithothermethods/_category_.json deleted file mode 100644 index f61854bb4f..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/usingwithothermethods/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Using With Other METHODS MDM And Group Policy", - "position": 30, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/videolearningcenter.md b/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/videolearningcenter.md deleted file mode 100644 index cf794679cc..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/videolearningcenter.md +++ /dev/null @@ -1,55 +0,0 @@ ---- -title: "Video Learning Center" -description: "Video Learning Center" -sidebar_position: 20 ---- - -# Video Learning Center - -See the following Video topics for all things installation and upkeep. - -## Getting Started - -- [Endpoint Policy Manager Cloud: Two minute introduction](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/introduction.md) -- [Endpoint Policy Manager Cloud: QuickStart](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/quickstart.md) -- [Endpoint Policy ManagerCloud: How to deploy Microsoft Group Policy Settings using Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/grouppolicysettings.md) -- [Endpoint Policy ManagerCloud: How to deploy Endpoint Policy Manager specific settings (using in-cloud editors and exporting from on-prem)](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/endpointpolicymanagersettings.md) -- [Endpoint Policy ManagerCloud: Use in-cloud ADMX settings maintained by Endpoint Policy Manager for Windows, Office, Chrome and more](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/admxsettings.md) -- [Endpoint Policy ManagerCloud: Upload and use your own ADMX files to Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/admxfiles.md) -- [Endpoint Policy Manager Cloud: General Tips about On-Prem to PP Cloud Export](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/onpremiseexport.md) -- [Endpoint Policy Manager Cloud and Security Settings (More examples)](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/securitysettings.md) -- [Endpoint Policy Manager Cloud + GPPrefs (More examples)](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/preferences.md) - -## Test Lab Best Practices - -- [Endpoint Policy Manager Cloud: What you need to get Started](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/testlabbestpractices/start.md) -- [How to create a DC for editing purposes](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/testlabbestpractices/createdc.md) -- [Testing and Troubleshooting By Renaming an endpoint Computer](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/testlabbestpractices/renameendpoint.md) -- [Endpoint Policy Manager Cloud: On-Prem Test Lab (tying it all together)](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/testlabbestpractices/onpremise.md) - -## Using with other METHODS (MDM and Group Policy) - -- [Endpoint Policy Manager Cloud + MDM Services: Install Cloud Client + automatically join PPC Groups and get policy.](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/usingwithothermethods/mdm.md) -- [Endpoint Policy ManagerCloud and Endpoint Policy Manager OnPremise – Together using PPCloud Licenses](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/usingwithothermethods/onpremise.md) - -## Security - -- [Endpoint Policy Manager Cloud: Security Features](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/security/features.md) -- [Endpoint Policy Manager Cloud: Immutable Log](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/security/immutablelog.md) -- [Endpoint Policy Manager Cloud Logs and Automatically Pushing via Email](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/security/emaillogs.md) -- [Endpoint Policy Manager Cloud: Adding New Admins](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/security/administrator.md) - -## Tips and Tricks - -- [Install the PP Cloud client with a PP Least Priv Manager Rule](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/tipsandtricks/leastprivilegemanagerrule.md) -- [Endpoint Policy Manager Cloud + Azure AD: Better Together for Computer ILT and Computer Policy Targeting](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/tipsandtricks/entraid.md) -- [PP Cloud + File Info Viewer: Get file info, without the MMC console](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/tipsandtricks/fileinfoviewer.md) -- [Endpoint Policy Manager Cloud: Restricted Groups Editor](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/tipsandtricks/restricted_groups_editor.md) - -## Upkeep and Daily Use - -- [Endpoint Policy Manager Cloud Reporting Demo](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/reports.md) -- [Endpoint Policy Manager Cloud: Strict vs. Loose Computer Registration Mode](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/registrationmode.md) -- [Endpoint Policy Manager Cloud Groups CSE and Cloud Client Small-Scale Testing and Updates](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/groups.md) -- [Endpoint Policy Manager Cloud: Automatically Join Groups with JOINTOKEN](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/jointoken.md) -- [How to import GPOs to Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/import.md) diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/_category_.json deleted file mode 100644 index 81eb4265fb..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Getting Started With Group Policy", - "position": 50, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/_category_.json deleted file mode 100644 index 78bc685400..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Knowledge Base", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "knowledgebase" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/grouppolicy/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/grouppolicy/_category_.json deleted file mode 100644 index 05fa3a9662..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/grouppolicy/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Endpoint Policy Manager Group Policy", - "position": 30, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/knowledgebase.md b/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/knowledgebase.md deleted file mode 100644 index 470d537f0d..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/knowledgebase.md +++ /dev/null @@ -1,26 +0,0 @@ ---- -title: "Knowledge Base" -description: "Knowledge Base" -sidebar_position: 10 ---- - -# Knowledge Base - -See the following Knowledge Base articles for getting started with Group Policy. - -## Troubleshooting - -- [How can I find the name of a GPO located within a PP Log file?](/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/troubleshooting/guid.md) -- [How does caching of item level targeting work when Microsoft ILT (Preferences ILT) is used?](/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/troubleshooting/cachepreferences.md) -- [How does caching of Item Level Targeting work when Endpoint Policy Manager ILT (ILT 2.0 Engine) is used?](/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/troubleshooting/cacheengine.md) -- [How do I turn on Item Level Targeting (ILT) logging if asked by Endpoint Policy Manager Tech Support (when using Preferences ILT engine)?](/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/troubleshooting/preferences.md) -- [Microsoft August 2024 Updates Breaking New Item-Level Targeting in GPOs](/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/troubleshooting/itemleveltargeting.md) -- [The Group Policy "Reporting ADM" appears to stop functioning in one GPO. What can I do to fix it?](/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/troubleshooting/reportingadm.md) - -## Tips, Tricks and FAQs - -- [How to insert User information in any Application via Group Policies?](/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/tipstricksfaq/insertuserinfo.md) - -## Endpoint Policy Manager Group Policy - -- [How to use PDQ Deploy to collect PPLOGS from remote computers then save them to a network location](/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/grouppolicy/pdqdeploy.md) diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/tipstricksfaq/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/tipstricksfaq/_category_.json deleted file mode 100644 index a1db433b9a..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/tipstricksfaq/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Tips, Tricks And FAQ", - "position": 20, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/troubleshooting/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/troubleshooting/_category_.json deleted file mode 100644 index 51f22c0d00..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/troubleshooting/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Troubleshooting", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/troubleshooting/preferences.md b/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/troubleshooting/preferences.md deleted file mode 100644 index 252747fc68..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/troubleshooting/preferences.md +++ /dev/null @@ -1,80 +0,0 @@ ---- -title: "How do I turn on Item Level Targeting (ILT) logging if asked by Endpoint Policy Manager Tech Support (when using Preferences ILT engine)?" -description: "How do I turn on Item Level Targeting (ILT) logging if asked by Endpoint Policy Manager Tech Support (when using Preferences ILT engine)?" -sidebar_position: 40 ---- - -# How do I turn on Item Level Targeting (ILT) logging if asked by Endpoint Policy Manager Tech Support (when using Preferences ILT engine)? - -Netwrix Endpoint Policy Manager (formerly PolicyPak) Item Level Targeting is a function of Group -Policy Preferences which is also incorporated into Endpoint Policy Manager. There are two pieces to -ILT: The editor and the evaluation within the Client Side Extension. - -The ILT editor in Group Policy Preferences can be seen in every Group Policy Preferences item, like -what's seen here. - -![196_1_img-01](/images/endpointpolicymanager/troubleshooting/log/itemleveltargeting/196_1_img-01.webp) - -The ILT editor in Endpoint Policy Manager can be seen in nearly all Endpoint Policy Manager items, -like what's seen here. - -![196_3_img-02](/images/endpointpolicymanager/troubleshooting/log/itemleveltargeting/196_3_img-02.webp) - -If you think your Item Level Targeting isn't working, we ask that you first "backtrack" to a quick -Group Policy Preferences test and try it there first. - -Indeed, we ask you take two steps: - -**Step 1 –** Create a Group Policy Preferences Shortcut with NO Item Level Targeting. We'll call -this www.1.com . In this experiment, this will be the "Control" group. (No ILT, just to see it -working.) - -**Step 2 –** Create a Group Policy Preferences Shortcut WITH your Item Level Targeting. We'll call -this www.2.com. In this experiment, this will get your "ILT Medicine" and see if ILT is working or -not. - -## Part 1: - -So, again, use Group Policy Preferences and create a new Group Policy Preferences shortcut to -www.1.com , on the DESKTOP, with TARGET URL being www.1.com and pick any icon you want. - -![196_5_img-03](/images/endpointpolicymanager/troubleshooting/log/itemleveltargeting/196_5_img-03.webp) - -## Part 2: - -Use Group Policy Preferences to create a Group Policy Preferences shortcut to www.2.com, on the -DESKTOP, with TARGET URL being www.2.com and pick any icon you want.. then click in the COMMON tab -and select Item Level Targeting, and put in your proposed ILT. - -![196_7_img-04](/images/endpointpolicymanager/troubleshooting/log/itemleveltargeting/196_7_img-04.webp) - -![196_9_img-05](/images/endpointpolicymanager/troubleshooting/log/itemleveltargeting/196_9_img-05.webp) - -Before you test, let's make sure we fully understand the experiment… - -![196_11_img-06](/images/endpointpolicymanager/troubleshooting/log/itemleveltargeting/196_11_img-06.webp) - -Then on the endpoint run GPupdate… Here is the result you should get: - -![196_13_img-07](/images/endpointpolicymanager/troubleshooting/log/itemleveltargeting/196_13_img-07.webp) - -So: - -**Step 1 –** If you only see www.1.com and not www.2.com, then something is wrong with your ILT -evaluation and it is evaluating to FALSE. This evaluation will also evaluate to FALSE in any -Endpoint Policy Manager item. - -**Step 2 –** If you BOTH www.1.com and www.2.com, then your ILT evaluation is evaluating to TRUE and -should also work in any Endpoint Policy Manager item. - -Now… how does Endpoint Policy Manager fit into this? - -If you take the WORKING ILT evaluation and use it in a Endpoint Policy Manager item… and it STILL -doesn't work. Then we can attempt to investigate it. - -That being said if you're really sure an ILT evaluation functions correctly in Group Policy -Preferences (see above) but not in Endpoint Policy Manager … you can continue to troubleshoot by -turning on ILT logging for Endpoint Policy Manager items using this -KB:[How do I turn on Item Level Targeting (ILT) logging if asked by Endpoint Policy Manager Tech Support?](/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/troubleshooting/itemleveltargeting.md) - -All log files require a support case to analyze. diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/_category_.json deleted file mode 100644 index 5e102a37bc..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Video Learning Center", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "videolearningcenter" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/gettingstarted/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/gettingstarted/_category_.json deleted file mode 100644 index ee7419d8c4..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/gettingstarted/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Getting Started", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/tipsandtricks/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/tipsandtricks/_category_.json deleted file mode 100644 index a6d7d9b805..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/tipsandtricks/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Tips And Tricks", - "position": 20, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/videolearningcenter.md b/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/videolearningcenter.md deleted file mode 100644 index aa370e6e69..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/videolearningcenter.md +++ /dev/null @@ -1,26 +0,0 @@ ---- -title: "Video Learning Center" -description: "Video Learning Center" -sidebar_position: 20 ---- - -# Video Learning Center - -See the following Video topics for getting started with Group Policy. - -## Getting Started - -- [Endpoint Policy Manager Explained: In about two minutes](/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/gettingstarted/explained.md) -- [How to create a DC for editing purposes](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/testlabbestpractices/createdc.md) -- [Admin Console And CSE Installation](/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/gettingstarted/install.md) -- [Endpoint Policy Manager with Group Policy Method: Getting Started](/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/gettingstarted/gettingstartedv.md) -- [Testing and Troubleshooting By Renaming an endpoint Computer](/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/gettingstarted/renameendpoint.md) -- [Integration with Group Policy (Basics: Installation, Backup, Restore and Reporting !)](/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/gettingstarted/integration.md) - -## Tips and Tricks - -- [Manual editing Item Level Targeting to affect local Admins and other local accounts](/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/tipsandtricks/editmanual.md) -- [Reduce GPOs (and/or export them for use with Endpoint Policy Manager Cloud or with MDM)](/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/tipsandtricks/exportgpos.md) -- [Expand Modular View of Endpoint Policy Manager Components in the GPMC back to the Flat Legacy View](/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/tipsandtricks/flatlegacyview.md) -- [Trim the MMC console for OU admins](/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/tipsandtricks/mmcconsole.md) -- [Prevent a Remote Desktop Connection Drop During GP Update](/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/tipsandtricks/remotedesktopconnection.md) diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/_category_.json deleted file mode 100644 index aaca223b7e..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Getting Started With MDM", - "position": 60, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/knowledgebase/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/knowledgebase/_category_.json deleted file mode 100644 index 78bc685400..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/knowledgebase/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Knowledge Base", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "knowledgebase" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/knowledgebase/knowledgebase.md b/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/knowledgebase/knowledgebase.md deleted file mode 100644 index cf3fef193a..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/knowledgebase/knowledgebase.md +++ /dev/null @@ -1,13 +0,0 @@ ---- -title: "Knowledge Base" -description: "Knowledge Base" -sidebar_position: 10 ---- - -# Knowledge Base - -See the following Knowledge Base articles for getting started with MDM. - -## Troubleshooting & Tips and Tricks - -- [How can I "stack" Endpoint Policy Manager MSIs so the XML items inside the MSI execute in a predictable order?](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/knowledgebase/troubleshooting/stackmsi.md) diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/knowledgebase/troubleshooting/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/knowledgebase/troubleshooting/_category_.json deleted file mode 100644 index 9a49b0d5cc..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/knowledgebase/troubleshooting/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Troubleshooting And Tips And Tricks", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/_category_.json deleted file mode 100644 index 5e102a37bc..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Video Learning Center", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "videolearningcenter" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/exportingtips/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/exportingtips/_category_.json deleted file mode 100644 index 7c7876fb82..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/exportingtips/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Exporting Tips And Tricks", - "position": 20, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/exportingtips/exportgpos.md b/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/exportingtips/exportgpos.md deleted file mode 100644 index 30a04e950d..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/exportingtips/exportgpos.md +++ /dev/null @@ -1,11 +0,0 @@ ---- -title: "Reduce GPOs (and/or export them for use with Endpoint Policy Manager Cloud or with MDM)" -description: "Reduce GPOs (and/or export them for use with Endpoint Policy Manager Cloud or with MDM)" -sidebar_position: 10 -hide_title: true ---- - -import ExportGPOs from '/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/tipsandtricks/exportgpos.md'; - - - diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/gettingstarted/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/gettingstarted/_category_.json deleted file mode 100644 index ee7419d8c4..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/gettingstarted/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Getting Started", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/iltwithscripts/_category_.json b/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/iltwithscripts/_category_.json deleted file mode 100644 index 3b7a015352..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/iltwithscripts/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "ILT (With Scripts)", - "position": 30, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/videolearningcenter.md b/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/videolearningcenter.md deleted file mode 100644 index 418b9029e3..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/videolearningcenter.md +++ /dev/null @@ -1,35 +0,0 @@ ---- -title: "Video Learning Center" -description: "Video Learning Center" -sidebar_position: 20 ---- - -# Video Learning Center - -See the following Video topics for getting started with MDM. - -## Getting Started - -- [Deploying Real Group Policy (and Extra Endpoint Policy Manager Settings) Overview](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/gettingstarted/realgrouppolicy.md) -- [How to create a DC for editing purposes](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/testlabbestpractices/createdc.md) -- [Endpoint Policy Manager and MDM walk before you run](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/gettingstarted/testsample.md) -- [Endpoint Policy Manager and Microsoft Intune](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/gettingstarted/microsoftintune.md) -- [Endpoint Policy Manager and MobileIron MDM](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/gettingstarted/mobileiron.md) -- [Endpoint Policy Managerand Workspace One (Airwatch) MDM: Deploy Group Policy and Endpoint Policy Manager superpowers today](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/gettingstarted/workspaceone.md) -- [Endpoint Policy Managerand Citrix Endpoint Manager: Deploy real Group Policy and Endpoint Policy Manager settings via CEM](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/gettingstarted/citrixendpointmanager.md) - -## Exporting, Tips, and Tricks - -- [Reduce GPOs (and/or export them for use with Endpoint Policy Manager Cloud or with MDM)](/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/tipsandtricks/exportgpos.md) -- [Deliver Group Policy Admin Templates Using Your MDM Service](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/exportingtips/admintemplates.md) -- [Deploying Endpoint Policy Managerdirectives without Group Policy (Endpoint Policy Manager Exporter Utility)](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/exportingtips/exporterutility.md) - -## Troubleshooting - -- [Testing and Troubleshooting By Renaming an endpoint Computer](/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/gettingstarted/renameendpoint.md) - -## ILT (with Scripts) - -- [Determine the Azure AAD Group Membership for User or Computers](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/iltwithscripts/entraid.md) -- [Use Endpoint Policy Manager cloud + Azure AAD Group Membership for User or Computers](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/iltwithscripts/entraidgroupmembership.md) -- [Use PP MDM to determine the Azure AAD Group Membership for User or Computers](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/iltwithscripts/entraidgroupdetermine.md) diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/_category_.json b/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/_category_.json deleted file mode 100644 index 496bae5691..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Endpoint Policy Manager GP Compliance Reporter", - "position": 210, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/_category_.json b/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/_category_.json deleted file mode 100644 index 78bc685400..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Knowledge Base", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "knowledgebase" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/_category_.json b/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/_category_.json deleted file mode 100644 index 2423a91478..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Getting Licensed", - "position": 20, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/trial.md b/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/trial.md deleted file mode 100644 index 734e03cf21..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/trial.md +++ /dev/null @@ -1,10 +0,0 @@ ---- -title: "How does Trial mode for Endpoint Policy Manager Group Policy Compliance Reporter work?" -description: "How does Trial mode for Endpoint Policy Manager Group Policy Compliance Reporter work?" -sidebar_position: 70 ---- - -# How does Trial mode for Endpoint Policy Manager Group Policy Compliance Reporter work? - -See this -article: [What is the fastest way to get started in an Endpoint Policy Manager trial, without running the License Request Tool?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingall/trial.md) diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettingstarted/_category_.json b/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettingstarted/_category_.json deleted file mode 100644 index ee7419d8c4..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettingstarted/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Getting Started", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettingstarted/install.md b/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettingstarted/install.md deleted file mode 100644 index fd3f3234e3..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettingstarted/install.md +++ /dev/null @@ -1,207 +0,0 @@ ---- -title: "Installing and Configuring Endpoint Policy Manager GPCR for use with SQL Server using SQL Authentication" -description: "Installing and Configuring Endpoint Policy Manager GPCR for use with SQL Server using SQL Authentication" -sidebar_position: 40 ---- - -# Installing and Configuring Endpoint Policy Manager GPCR for use with SQL Server using SQL Authentication - -This document will step through preparing for and installing the GPCR server and Admin Client -software, and assumes MS SQL Server is installed on a separate, accessible server, using default -settings. - -## Configuring Active Directory - -Set who is allowed to access the GPCR client and what computers will have their data collected. - -**Step 1 –** Create a security group in the domain (e.g. GPCR Admin) and populate it with and -administrators that require access to the GPCR client (admin console) - -**Step 2 –** Create a security group in the domain (e.g. GPCR Computers) and populate it with -individual computers or other computer groups (e.g. Domain Computers) that will participate the -compliance reporting. - -## Configuring SQL Server - -### Set server Authentication - -Authentication must be set to allow both SQL and windows authentication - -**Step 1 –** Open "Microsoft SQL Server Management Studio" and connect to your server instance - -**Step 2 –** Right-click on SQL server instance and click "Properties" - -**Step 3 –** On the Server Properties page click on the "Security" tab and set the Server -authentication to "SQL Server and Windows Authentication" - -![673_1_image-20200430140138-1](/images/endpointpolicymanager/grouppolicycompliancereporter/673_1_image-20200430140138-1.webp) - -**Step 4 –** Click OK to Close - -**Step 5 –** If changed, restart MSSQLSERVER service - -### Create DB Admin - -Create an administrative SQL account within SSMS to own and access the GPCR database. - -**Step 1 –** Expand "Security", right-click "Logins" and select "New Login" - -**Step 2 –** On General tab - -1. Set Login name, e.g. "GPCR_DBAdmin" -2. Select radio button "SQL Server authentication" and set password -3. Uncheck "Enforce password policy" - - ![673_3_image-20200430140138-2](/images/endpointpolicymanager/grouppolicycompliancereporter/673_3_image-20200430140138-2.webp) - -**Step 3 –** Click on "Server Roles" tab and select "public" and "sysadmin" roles - -![673_5_image-20200430140138-3](/images/endpointpolicymanager/grouppolicycompliancereporter/673_5_image-20200430140138-3.webp) - -**Step 4 –** Save and close - -### Create Empty DB - -GPCR requires an empty SQL database be present during the installation - -**Step 1 –** In Microsoft SSMS, right-click on "Databases" and select "New Database" - -![673_7_image-20200430140138-4_471x171](/images/endpointpolicymanager/grouppolicycompliancereporter/673_7_image-20200430140138-4_471x171.webp) - -**Step 2 –** Enter name for database (e.g. GPCR) - -**Step 3 –** Set Owner as DB admin created earlier (GPCR_DBAdmin in example) - -**Step 4 –** Place DB and log files where desired, if different from default - -**Step 5 –** Save and close - -## Ensuring Connectivity - -Ensure communication is open between GPCR Client and SQL server - -### Enable DTC - -The following is run on both the Netwrix Endpoint Policy Manager (formerly PolicyPak) GPCR Client -computer (Where the Admin Console is installed) and the remote SQL Server - -**Step 1 –** Open Component Services - -1. Open the "run" box (Win-R), type `"dcomcnfg"` and click OK - -![673_9_image-20200430140138-5](/images/endpointpolicymanager/troubleshooting/error/gpocompilancereporter/669_3_image-20200327172830-3.webp) - -**Step 2 –** Expand Console Root -> Component Services -> Computers -> My Computer -> Distributed -Transaction Coordinator, Right-Click on Local DTC and click Properties - -![673_11_image-20200430140138-6](/images/endpointpolicymanager/troubleshooting/error/gpocompilancereporter/669_5_image-20200327172830-4.webp) - -**Step 3 –** On the Security tab -> Security Settings and Configure as follows: - -1. Check "Network DTC Access" -2. Check "Allow Inbound" and "Allow Outbound" -3. Select "No Authentication Required" -4. Check "Enable SNA LU 6.2 Transactions" -5. Click OK - - ![673_13_image-20200430140138-7](/images/endpointpolicymanager/troubleshooting/error/gpocompilancereporter/669_7_image-20200327172830-5.webp) - -**Step 4 –** The MSDTC service will need to be restarted for the changes to take affect – Click YES -to restart now or NO to restart manually later. - -### Enable Firewall Rules - -Enable DTC through the firewall on both Endpoint Policy Manager GPCR Server and the remote SQL -Server - -**Step 1 –** Open the Windows Defender Firewall - -**Step 2 –** Click on "Allow an app or feature through Windows Defender Firewall" - -![673_15_image-20200430140138-8](/images/endpointpolicymanager/troubleshooting/error/gpocompilancereporter/669_9_image-20200327172830-6.webp) - -**Step 3 –** Find "Distributed Transaction Coordinator", check and check the appropriate Network -profile (e.g. Domain). - -![673_17_image-20200430140138-9](/images/endpointpolicymanager/troubleshooting/error/gpocompilancereporter/669_11_image-20200327172830-7.webp) - -**Step 4 –** Click OK to save and close - -## Installing GPCR - -When installing GPCR, download the latest bits from Endpoint Policy Manager. It is our -recommendation that when downloading the latest software version, to grab "everything" (latest bits -plus Paks, manuals and guidance). They can be found at -[https://portal.endpointpolicymanager.com/downloads/everything](https://portal.endpointpolicymanager.com/downloads/everything) - -### GPCR Server - -These steps assume that this is the first time GPCR has been installed. If previously installed, you -will also be prompted to choose between the previously configured database and admin group, and the -setting new values for each. - -**Step 1 –** In the downloaded ISO or ZIP, open "Endpoint Policy Manager Group Policy Compliance -Reporter" folder and run Endpoint Policy Manager GP Compliance Reporter (Server).msi - -**Step 2 –** Click "Next >" through first screen - -**Step 3 –** GPCR requires that Server and client (admin console) be at version 20.3.2366.420 at -minimum. select "Yes, I confirm" and "Next >" to continue - -**Step 4 –** Accept agreement and "Next >" to continue - -**Step 5 –** Change installation or just click "Next >" to accept default (recommended) and continue - -**Step 6 –** Click "Change" and find domain security group created earlier (GPCR Admin in example) -and click "Next >" - -![673_19_image-20200430140138-10](/images/endpointpolicymanager/grouppolicycompliancereporter/673_19_image-20200430140138-10.webp) - -**Step 7 –** Select "Microsoft SQL Server and "Next >" - -![673_21_image-20200430140138-11](/images/endpointpolicymanager/grouppolicycompliancereporter/673_21_image-20200430140138-11.webp) - -**Step 8 –** Configure Connection to SQL Server - -1. Server = Hostname or IP address of SQL server -2. Uncheck "Trusted Connection …" -3. Type in Username and password of SQL account created earlier -4. Click "Refresh" to get list of Databases on SQL server and select empty DB created earlier -5. Next > - - ![673_23_image-20200430140138-12](/images/endpointpolicymanager/grouppolicycompliancereporter/673_23_image-20200430140138-12.webp) - -**Step 9 –** Install -> click yes if prompted for \*.msi - -### GPCR Client - -The GPCR Client (Admin Console) can be installed on any computer. It is recommended that it be -installed on the computer that is used for Group Policy Administration. - -:::note -The client itself is not licensed and thereby can be installed on as many computers as -required. -::: - - -**Step 1 –** In the downloaded ISO or ZIP, open "Endpoint Policy Manager Group Policy Compliance -Reporter" folder and run Endpoint Policy Manager GP Compliance Reporter (Admin Console).msi - -**Step 2 –** Click "Next >" through first screen - -**Step 3 –** GPCR requires that Server and client (admin console) be at version 20.3.2366.420 or -higher. Select "Yes, I confirm" and "Next >" to continue - -**Step 4 –** Accept agreement and "Next >" to continue - -**Step 5 –** Change installation or just click "Next >" to accept default (recommended) and continue - -**Step 6 –** Select desired application shortcuts and click "Next >" - -**Step 7 –** Install -> click yes if prompted for \*.msi - -### GPCR General configuration - -For information on completing the GPCR configuration wizard, setting up Auditing and Licensing, and -for general usage, please refer to the manual. In addition, review the KB video -[Installing Compliance Reporter Server and Client](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/gettingstarted/install.md) diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/knowledgebase.md b/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/knowledgebase.md deleted file mode 100644 index 2a636a39ec..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/knowledgebase.md +++ /dev/null @@ -1,41 +0,0 @@ ---- -title: "Knowledge Base" -description: "Knowledge Base" -sidebar_position: 10 ---- - -# Knowledge Base - -See the following Knowledge Base articles for Endpoint Policy Manager GP Compliance Reporter. - -## Getting Started - -- [What scenarios is PPGPCR not well suited for today?](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettingstarted/scenarios.md) -- [Do I need the Group Policy Compliance Reporter product if I use Endpoint Policy ManagerCloud or Endpoint Policy Manager MDM? (Or, how do I get delivery reports for Group Policy, Cloud or MDM directives?)](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettingstarted/deliveryreports.md) -- [What are the storage requirements when using PPGPCR with SQL server?](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettingstarted/sqlserver.md) -- [Installing and Configuring Endpoint Policy Manager GPCR for use with SQL Server using SQL Authentication](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettingstarted/install.md) - -## Getting Licensed - -- [Is Endpoint Policy Manager Group Policy Compliance Reporter licensed on a per-user basis or a per-computer basis?](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/basis.md) -- [What kinds of licenses are there for Endpoint Policy Manager Group Policy Compliance Reporter?](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/types.md) -- [How many people can use Endpoint Policy Manager Group Policy Compliance Reporter?](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/userlimit.md) -- [I want to generate Compliance reports on Microsoft GP Preferences/Admin Templates and/or Security Settings. Which license do I need?](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/compliancereports.md) -- [Can I share Compliance Reports, tests and history across my team?](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/shareacrossteam.md) -- [What's the difference between Pull Mode, Push Mode and Standalone and Server components in the Group Policy Compliance Reporter?](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/difference.md) -- [How does Trial mode for Endpoint Policy Manager Group Policy Compliance Reporter work?](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/trial.md) -- [Is there a minimum purchase for Endpoint Policy Manager Group Policy Compliance Reporter?](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/minimum.md) -- [What happens if I try to use Endpoint Policy ManagerGroup Policy Compliance Reporter in unlicensed places? What happens if the Endpoint Policy Manager Group Policy Compliance Reporter license expires?](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/expire.md) -- [What is "Truing Up" for On-Premise products?](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/trueup.md) -- [What if I don't run the license tool to "True-Up" my Endpoint Policy Manager Group Policy Compliance Reporter every year?](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/tool.md) -- [What if I pay for multiple years of Endpoint Policy Manager Group Policy Compliance Reporter in advance?](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/gettinglicensed/multiyear.md) - -## Troubleshooting - -- [How can I use Group Policy Compliance Reporter with multiple domains?](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/troubleshooting/domainmultiple.md) -- [What Server-side items should I send to Tech Support if asked?](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/troubleshooting/serverside.md) -- [What does "Unsupported item" mean in PPGPCR reports and tests?](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/troubleshooting/unsupporteditem.md) -- [GPCR Snapshot fails with error "System.InvalidOperationException" when using a remote SQL server and one is a clone of the other](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/troubleshooting/systeminvalidoperationexception.md) -- [When using a remote SQL Server, GPCR Snapshot fails with error "System.InvalidOperationException" and "MSDTC has been disabled" in Debug log](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/troubleshooting/systeminvalidoperationexceptionmsdtc.md) -- [When does the Auditor process send up events to the server?](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/troubleshooting/processauditor.md) -- [How do I turn on enhanced logging for Endpoint Policy Manager Group Policy Compliance Reporter if asked to do so?](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/troubleshooting/logenhanced.md) diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/troubleshooting/_category_.json b/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/troubleshooting/_category_.json deleted file mode 100644 index 09e2a51e2d..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/troubleshooting/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Troubleshooting", - "position": 30, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/troubleshooting/domainmultiple.md b/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/troubleshooting/domainmultiple.md deleted file mode 100644 index 430a45e7e7..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/troubleshooting/domainmultiple.md +++ /dev/null @@ -1,114 +0,0 @@ ---- -title: "How can I use Group Policy Compliance Reporter with multiple domains?" -description: "How can I use Group Policy Compliance Reporter with multiple domains?" -sidebar_position: 10 ---- - -# How can I use Group Policy Compliance Reporter with multiple domains? - -First – make sure you have GPCR implemented in the primary domain correctly. - -## Group Policy Compliance Reporter Implementation - -**Step 1 –** Make sure you have the latest download of Compliance Reporter, which you should have if -you recently downloaded the BITS from the portal - -**Step 2 –** Pick a server where you want to run Compliance Reporter - -**Step 3 –** Work through this video to install Compliance Reporter - -- [Installing Compliance Reporter Server and Client](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/gettingstarted/install.md) - -**Step 4 –** Work through this video to setup Compliance Reporter and for machines to report in -(this is the Server version) - -- [Setting up Client-less Endpoint Auditing (Push Mode with Server)](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/gettingstarted/modepush.md) - -## From within the videos above, here is a summary of some important steps: - -Preparatory Steps (before installing GPCR) - -**Step 1 –** Determine the AD Computer security group to be used - -1. Used for 2 Purposes - - - for Server to Accept RSOP uploads - - for ILT on the Scheduled Task GPO (optional) - -**Step 2 –** Confirm that a shortname will work for Auditor path, recommend FQDN - -1. Ie. Are you using DNS Suffix Search Lists in the primary domain and in other domains such that a - shortname will resolve into its FQDN correctly -2. In most cases, its safer to use the FQDN of the GPCR server - -**Step 3 –** Will we have access to Create GPO from Server or do we need to export - -1. Ie. Will the account that the admin/engineer is logged into while using GPCR have - access/permissions to create GPO's - -**Step 4 –** Recommended to Import `ADMX` files (for troubleshooting, further configuration, -logging, etc.) - -1. We have some Netwrix Endpoint Policy Manager (formerly PolicyPak) ADMX templates and among those - are several settings specific to GPCR that allows for enabling additional logging and managing - when and how often RSOP checkins occur -2. Recommend to have those imported to the domain Central Store of all domains to be available if - needed - -**Step 5 –** Understand pros and cons of doing all computers or just selections from certain sites -that are representative of the site and its population (and how the AD group plays into that) - -1. In domains that have a few hundred to a low thousand and are all well connected in large - locations, it is often ok to deploy the scheduled task GPO to all machines for all to check in -2. However for larger domains, and also when remote sites might be less well connected, having lower - bandwidth, its recommended to identify segments of computers to be "representatives" of their - population. That is, choose some number at a location to receive the GPO and be the - representatives of what machines at that location are receiving. - - This cuts down on bandwidth used and load on the server -3. The AD group created earlier can be used, by only having those computers desired as members. - -## Overall Server Setup Steps (detailed in videos links above) - -**Step 1 –** Install Server piece - -- This is a Windows Service - -**Step 2 –** Install Server Console - -- Often on same server as server service, but could be another server as well - -**Step 3 –** Configure Server settings via Console - -1. Will need the AD Group created for this step -2. Will need the server name (shortname or FQDN) for this step -3. Will need to be able to create a GPO or export and import later for this step - -![758_1_image-20200130171300-1_950x485](/images/endpointpolicymanager/grouppolicycompliancereporter/758_1_image-20200130171300-1_950x485.webp) - -## Enabling Other Domains to connect to GPCR - -**Step 1 –** Now that you have the server up and running in the primary domain, the following steps -are needed in each additional domain. - -**Step 2 –** Copy the GPO you created (during step 3 above configuring server) from Domain 1 to -Domain 2 and deploy it there - -1. Do a GPO Backup from Domain 1 -2. Copy the Backup folder to a server on Domain 2 -3. Restore GPO to Domain 2 -4. This article describes the general process of backing up and restoring GPO's, specifically in the - "About Backup and Import (between domains)" section - - [https://www.endpointpolicymanager.com/pp-blog/backing-up-your-gpos-with-and-without-policypak-data-dont-get-burned](https://www.endpointpolicymanager.com/pp-blog/backing-up-your-gpos-with-and-without-policypak-data-dont-get-burned) - -**Step 3 –** Create an AD group with the SAME NAME as the AD Group in Domain 1 - -**Step 4 –** Add computers in Domain 2 to the new Domain 2 AD Group - -### NOTE – Why a Group in each Domain is Required - -- Currently GPCR cannot innumerate members of a Domain Local group that are not in the same domain. - Even with a two way forest trust in place -- Therefore the workaround as noted above is to create the corresponding local domain group of the - same name as the primary GPCR domain - - ![758_3_image-20200130171300-2](/images/endpointpolicymanager/grouppolicycompliancereporter/758_3_image-20200130171300-2.webp) diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/_category_.json b/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/_category_.json deleted file mode 100644 index 5e102a37bc..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Video Learning Center", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "videolearningcenter" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/gettingstarted/_category_.json b/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/gettingstarted/_category_.json deleted file mode 100644 index f402df76f1..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/gettingstarted/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Getting Started", - "position": 20, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/troubleshooting/_category_.json b/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/troubleshooting/_category_.json deleted file mode 100644 index 0ee716333e..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/troubleshooting/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Troubleshooting", - "position": 40, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/using/_category_.json b/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/using/_category_.json deleted file mode 100644 index bb8443979e..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/using/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Using Endpoint Policy Manager Group Policy Compliance Reporter", - "position": 30, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/videolearningcenter.md b/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/videolearningcenter.md deleted file mode 100644 index 812ef31865..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/videolearningcenter.md +++ /dev/null @@ -1,33 +0,0 @@ ---- -title: "Video Learning Center" -description: "Video Learning Center" -sidebar_position: 20 ---- - -# Video Learning Center - -See the following Video topics for Endpoint Policy Manager GP Compliance Reporter. - -## What does it do, and why do I need it? - -- [2 Minute Quick Overview for Managers](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/whatdoesitdo/overviewmanager.md) -- [7 Minute Technical Overview for IT Pros](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/whatdoesitdo/overviewtechnical.md) -- [Standalone Mode](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/whatdoesitdo/modestandalone.md) -- [Server Mode](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/whatdoesitdo/modeserver.md) - -## Getting Started - -- [Installing Compliance Reporter Server and Client](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/gettingstarted/install.md) -- [Using Pull Mode (with or without PPGPCR server)](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/gettingstarted/modepull.md) -- [Setting up Client-less Endpoint Auditing (Push Mode with Server)](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/gettingstarted/modepush.md) -- [Enhanced Security for Server](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/gettingstarted/securityenhanced.md) - -## Using Endpoint Policy Manager Group Policy Compliance Reporter - -- [Endpoint Policy Manager GP Compliance Reporter: Using an Existing GPO as a test](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/using/existinggpos.md) -- [Take existing GPOs and quickly bring them into PPGPCR (and keep them updated)](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/using/importgpos.md) -- [Import STIG files to make your applications more secure](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/using/importstig.md) - -## Troubleshooting - -- [Open required firewall ports](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/troubleshooting/firewallports.md) diff --git a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/whatdoesitdo/_category_.json b/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/whatdoesitdo/_category_.json deleted file mode 100644 index d4b636352d..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/whatdoesitdo/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "What Does It Do And Why Do I Need It", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/_category_.json b/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/_category_.json deleted file mode 100644 index d1e552300c..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "GPO Export Merge Admin Templates And Preferences 2.0", - "position": 70, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/_category_.json b/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/_category_.json deleted file mode 100644 index 78bc685400..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Knowledge Base", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "knowledgebase" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/admintemplatestips/_category_.json b/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/admintemplatestips/_category_.json deleted file mode 100644 index 651ec85bef..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/admintemplatestips/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Admin Templates Manager Tips and Tricks", - "position": 15, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/admintemplatestroubleshooting/_category_.json b/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/admintemplatestroubleshooting/_category_.json deleted file mode 100644 index 92f33f78b6..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/admintemplatestroubleshooting/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Admin Templates Manager Troubleshooting", - "position": 20, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicypreferences/_category_.json b/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicypreferences/_category_.json deleted file mode 100644 index 9ec2e3f316..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicypreferences/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Exporting Group Policy Preferences Using Endpoint Policy Preferences Manager", - "position": 40, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicysecurity/_category_.json b/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicysecurity/_category_.json deleted file mode 100644 index 1bea7488f9..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicysecurity/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Exporting Group Policy Security Settings Using Endpoint Policy Manager Security Settings Manager", - "position": 50, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/gpoexportmanager/_category_.json b/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/gpoexportmanager/_category_.json deleted file mode 100644 index 32790b5dec..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/gpoexportmanager/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "GPO Export Manager Getting Started", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/knowledgebase.md b/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/knowledgebase.md deleted file mode 100644 index 30f3270678..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/knowledgebase.md +++ /dev/null @@ -1,45 +0,0 @@ ---- -title: "Knowledge Base" -description: "Knowledge Base" -sidebar_position: 10 ---- - -# Knowledge Base - -See the following Knowledge Base articles for GPO Export Merge, Admin Templates, and Preferences -2.0. - -## GPO Export Manager: Getting Started - -- [Which security settings can be exported by GPO Export Manager?](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/gpoexportmanager/securitysettings.md) -- [Why must some GPPreferences items be run in User Context?](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/gpoexportmanager/usercontext.md) - -## Admin Templates Manager: Tips and Tricks - -- [Which settings can be managed with the Admin Templates Manager component?](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/admintemplatestips/settings.md) -- [How do I disable elements in Office (Outlook, etc.) using Endpoint Policy Manager and ADMX files?](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/admintemplatestips/disableofficeelements.md) - -## Admin Templates Manager: Troubleshooting - -- [What Admin Console MSI and CSE versions are supported for Endpoint Policy Manager Admin Templates Manager ?](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/admintemplatestroubleshooting/versions.md) -- [I created a Collection and/or items, but I don't see them in the Group Policy settings report. Why and how can I fix it?](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/admintemplatestroubleshooting/settingsreport.md) -- [I've created a collection in the Administrative Templates Manager and I've added policies to that collection. However, they are not showing up in the main window.](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/admintemplatestroubleshooting/missingcollections.md) -- [I get a "Policy Duplicates" error when adding new policies using Endpoint Policy Manager Admin Templates Manager. What should I do?](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/admintemplatestroubleshooting/policyduplicates.md) -- [I get a "Namespace already defined" error when making new Endpoint Policy Manager Admin Templates Manager policies. What is this?](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/admintemplatestroubleshooting/namespacealreadydefined.md) -- [How to Mitigate Windows Print Spooler Remote Code Execution Vulnerability (CVE-2021-34527)](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/admintemplatestroubleshooting/windowsprintspooler.md) - -## Exporting Group Policy Preferences / Using Endpoint Policy Preferences Manager - -- [Where is my Endpoint Policy Manager Preferences Component license and how do I request one?](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicypreferences/componentlicense.md) -- [Which settings can be managed with the Preferences Manager component?](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicypreferences/settings.md) -- [How To deploy a TCP/IP Printer using Group Policy Preferences in Endpoint Policy Manager Cloud ](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicypreferences/printerdeploy.md) -- [Why do I see slowdowns on my machines when Endpoint Policy Manager Preferences is licensed and computers domain joined? Can this be worked around?](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicypreferences/domainjoined.md) -- [How to deliver network drive mappings using Group Policy Preferences on the computer side](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicypreferences/drivemappings.md) -- [How to enable and start a service using Group Policy Preferences](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicypreferences/startservice.md) -- [How do I use passwords with Group Policy Preferences items within Endpoint Policy Manager Cloud?](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicypreferences/passwords.md) - -## Exporting Group Policy Security Settings / Using Endpoint Policy Manager Security Settings Manager - -- [Can I use Endpoint Policy Manager Cloud to deliver certificates ?](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicysecurity/delivercertificates.md) -- [Why Won't my Windows Security Settings Export using GPO Export Manager](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicysecurity/securitysettings.md) -- [Why do I sometimes see Endpoint Policy Manager Cloud security settings and sometimes see on-prem GPO security settings?](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicysecurity/onpremisecloud.md) diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/_category_.json b/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/_category_.json deleted file mode 100644 index 5e102a37bc..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Video Learning Center", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "videolearningcenter" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/admintemplatesmanager/_category_.json b/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/admintemplatesmanager/_category_.json deleted file mode 100644 index 7f8b8dc5a9..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/admintemplatesmanager/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Admin Templates Manager Getting Started", - "position": 20, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/admintemplatesmethods/_category_.json b/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/admintemplatesmethods/_category_.json deleted file mode 100644 index 07f5c5e9ff..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/admintemplatesmethods/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Admin Templates Methods Cloud MDM SCCM Etc", - "position": 30, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/admintemplatestips/_category_.json b/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/admintemplatestips/_category_.json deleted file mode 100644 index 339df9205c..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/admintemplatestips/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Admin Templates Tips And Tricks", - "position": 40, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/exportinggrouppolicy/_category_.json b/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/exportinggrouppolicy/_category_.json deleted file mode 100644 index b685527977..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/exportinggrouppolicy/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Exporting Group Policy Preferences Using Endpoint Policy Preferences Manager", - "position": 60, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/exportingtocloud/_category_.json b/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/exportingtocloud/_category_.json deleted file mode 100644 index dd66b064eb..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/exportingtocloud/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Exporting To Cloud MDM And SCCM Getting Started", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/gettingstarted/_category_.json b/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/gettingstarted/_category_.json deleted file mode 100644 index c8df15ad86..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/gettingstarted/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Getting Started Preferences 2.0", - "position": 50, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/videolearningcenter.md b/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/videolearningcenter.md deleted file mode 100644 index ffe8184b59..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/videolearningcenter.md +++ /dev/null @@ -1,43 +0,0 @@ ---- -title: "Video Learning Center" -description: "Video Learning Center" -sidebar_position: 20 ---- - -# Video Learning Center - -See the following Video topics for GPO Export Merge, Admin Templates, and Preferences 2.0. - -## Exporting to Cloud, MDM, and SCCM: Getting Started - -- [Export Real GPO settings for use with PP Cloud or any MDM Service.](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/exportingtocloud/realgposettings.md) -- [Use your GPOs with Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/exportingtocloud/cloudimport.md) -- [Endpoint Policy Export Manager with MDM (like Intune)](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/exportingtocloud/mdm.md) -- [Endpoint Policy Manager Exporter and SCCM: Deploy real GPOs via SCCM](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/exportingtocloud/sccm.md) -- [GPO MERGE TOOL REVERSE](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/exportingtocloud/mergetool.md) - -## Admin Templates Manager: Getting Started - -- [Endpoint Policy Manager Admin Templates: Collections and Item Level Targeting](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/admintemplatesmanager/collections.md) -- [Endpoint Policy Manager Admin Templates Manager: Switched Policies (without Loopback)](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/admintemplatesmanager/switchedpolicies.md) - -## Admin Templates Methods: Cloud, MDM, SCCM, etc. - -- [Reduce GPOs (and/or export them for use with Endpoint Policy Manager Cloud or with MDM)](/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/tipsandtricks/exportgpos.md) -- [Endpoint Policy Manager Cloud: Deploy Group Policy Admin template settings over the internet](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/admintemplatesmethods/deployinternet.md) - -## Admin Templates: Tips & Tricks - -- [The Ultimate Guide to Managing Screensavers](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/admintemplatestips/screensavers.md) - -## Getting Started: Preferences 2.0 - -- [Endpoint Policy Manager Preferences: Printers (Consolidate GPOs and also deploy them via PP Cloud and your MDM service)](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/gettingstarted/consolidateprinter.md) -- [Endpoint Policy Manager Preferences: Drive Maps (Consolidate GPOs and also deploy them via PP Cloud and your MDM service)](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/gettingstarted/drivemaps.md) -- [Endpoint Policy Manager Preferences: Registry Items (Consolidate GPOs and also deploy them via PP Cloud and your MDM service)](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/gettingstarted/consolidateregistry.md) -- [Endpoint Policy Manager Preferences: Shortcuts (Consolidate GPOs and also deploy them via PP Cloud and your MDM service)](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/gettingstarted/shortcuts.md) - -## Exporting Group Policy Preferences / Using Endpoint Policy Preferences Manager - -- [Deliver GPPrefs items without using loopback mode](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/exportinggrouppolicy/delivergpprefs.md) -- [Endpoint Policy Manager Cloud: Use PP Cloud to create a new local user on your endpoints](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/exportinggrouppolicy/cloudlocaluser.md) diff --git a/docs/endpointpolicymanager/knowledgebase/installation/_category_.json b/docs/endpointpolicymanager/knowledgebase/installation/_category_.json deleted file mode 100644 index 45d459a3f4..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/installation/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "All Things Installation And Upkeep", - "position": 40, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/_category_.json b/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/_category_.json deleted file mode 100644 index 78bc685400..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Knowledge Base", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "knowledgebase" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/antivirussystemsoftware/_category_.json b/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/antivirussystemsoftware/_category_.json deleted file mode 100644 index 91d03fa362..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/antivirussystemsoftware/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "AntiVirus And Other System Software", - "position": 40, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/backupandrestore/_category_.json b/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/backupandrestore/_category_.json deleted file mode 100644 index 1a01a8e73e..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/backupandrestore/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Backup And Restore", - "position": 100, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/bestpractices/_category_.json b/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/bestpractices/_category_.json deleted file mode 100644 index 5ad1c8c88b..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/bestpractices/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Best Practices Keeping Up To Date With Releases", - "position": 80, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/bestpractices/commandline.md b/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/bestpractices/commandline.md deleted file mode 100644 index 77d822ee60..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/bestpractices/commandline.md +++ /dev/null @@ -1,62 +0,0 @@ ---- -title: "How to trigger an update of the Endpoint Policy ManagerClient Side Extension and Cloud Client via command line using Endpoint Policy Manager Cloud versus Group Policy (OnPrem) Edition" -description: "How to trigger an update of the Endpoint Policy ManagerClient Side Extension and Cloud Client via command line using Endpoint Policy Manager Cloud versus Group Policy (OnPrem) Edition" -sidebar_position: 50 ---- - -# How to trigger an update of the Endpoint Policy ManagerClient Side Extension and Cloud Client via command line using Endpoint Policy Manager Cloud versus Group Policy (OnPrem) Edition - -## Using Endpoint Policy Manager Cloud - -From a CMD prompt, run `ppcloud /cseupdatenow` or`ppcloud /update` (both commands do the same thing) -Check for updated cloud client and client-side extensions and install them, if any are available. - -From more information seeRecommendations when using Netwrix Endpoint Policy Manager (formerly -PolicyPak) Cloud: Rings and Rollouts in the topic below. - -- [Using Rings to Test and Update the Endpoint Policy Manager Client-Side Extension and/or Cloud Client (And How to Stay Supported)](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/bestpractices/rings.md) - -:::note -When using the commands above both the CSE and PPC client will be updated if new versions -are available. -::: - - -## Using Endpoint Policy Manager Group Policy (OnPrem) Edition - -From a CMD prompt run `ppupdate`followed by one of the switches in the examples provided below. - -:::note -These switches are dependent on having the CSE MSI files present in the Central Store See -Active Directory Options 2 & 3 in the KB below for more information. -::: - - -[Using Rings to Test and Update the Endpoint Policy Manager Client-Side Extension and/or Cloud Client (And How to Stay Supported)](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/bestpractices/rings.md) - -Examples: - -``` -ppupdate /cseupdate -``` - -Forces CSE to immediately re-read `update.config` - -Check for updates will be performed on schedule. - -``` -ppupdate /cseupdatenow -``` - -Forces CSE to immediately re-read `update.config`, checks for updates and installs them if any are -available. - -Using this option will also reset the schedule. - -``` -ppupdate /cseupdatenow /force  -``` - -When specified along with /cseupdatenow, forces CSE to check for updates even when automatic updates -are disabled in `update.config`. This option is useful for those who want to check for updates on -their own schedule. diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/gpoinitialinstall/_category_.json b/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/gpoinitialinstall/_category_.json deleted file mode 100644 index 789a8360f2..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/gpoinitialinstall/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Method GPO Initial Install", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/installandupgrade/_category_.json b/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/installandupgrade/_category_.json deleted file mode 100644 index e9500a3d2f..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/installandupgrade/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Install And Upgrade Troubleshooting", - "position": 60, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/knowledgebase.md b/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/knowledgebase.md deleted file mode 100644 index d380868cfb..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/knowledgebase.md +++ /dev/null @@ -1,76 +0,0 @@ ---- -title: "Knowledge Base" -description: "Knowledge Base" -sidebar_position: 10 ---- - -# Knowledge Base - -See the following Knowledge Base articles for all things installation and upkeep. - -## Method GPO: Initial Install - -- [Does Endpoint Policy Manager admin console need to be installed on Domain Controller (DC)?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/gpoinitialinstall/adminconsole.md) -- [I installed the Admin Console MSI, but I don't see the Endpoint Policy Manager node when I go to edit a GPO. Why?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/gpoinitialinstall/node.md) -- [What are the two ways that can I install the GPMC on my Admin Station (Server or Windows 10) machine?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/gpoinitialinstall/methods.md) -- [When I edit the GPO, the settings don't seem to "stick"](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/gpoinitialinstall/savesettings.md) - -## Method SCCM: Initial Install (or other systems) - -- [How do I deploy the Endpoint Policy Manager CSE via SCCM (or other systems management system) ?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/sccminitialinstall/sccm.md) - -## Method PDQ Deploy (recommended) - -- [Managing Group Policy using Endpoint Policy Manager and PDQ Deploy](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/methodpdqdeploy/pdqdeploy.md) - -## AntiVirus and other System Software - -- [I want to use Endpoint Policy Managerwith Citrix App Layering (aka Unidesk). At which layer should I implement the Endpoint Policy Manager Client Side Extension?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/antivirussystemsoftware/citrixapplayering.md) -- [How must I configure my Anti-virus or system-level software to work with Endpoint Policy Manager CSE?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/antivirussystemsoftware/antivirus.md) -- [Why am I prompted about a Digitally Signed Driver for Endpoint Policy Manager CSE (and how do I work around it)?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/antivirussystemsoftware/digitallysigneddriver.md) -- [Why won't the Endpoint Policy Manager services start, with an error like (or similar to) "Verify that you have sufficient privileges to start system services."?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/antivirussystemsoftware/sufficientprivileges.md) - -## Performance Related Questions - -- [I see many instances of the Endpoint Policy Manager Watcher (ppWatcher) service running on my clients, is that normal? And how can I check memory usage?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/performancequestions/watcherservicememoryusage.md) -- [How would I verify if Endpoint Policy Manager Client Side Extension is / is not causing high or CPU disk slowdowns?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/performancequestions/cpuslowdown.md) - -## Install and Upgrade Troubleshooting - -- [The CSE won't uninstall or allow in-place upgrade. What should I do?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/installandupgrade/uninstall.md) -- [How do I troubleshoot slow logins (or other login problems), user profile issues, explorer.exe or other Windows problems? What if I'm having problems on ONE (or very few PCs)?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/installandupgrade/slowlogins.md) -- [What can I do if I installed a new CSE version and it's causing problems (slowdowns or other issues?)](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/installandupgrade/newversionissues.md) -- [How do I enable a STANDARD USER to see the COMPUTER SIDE RsOP ?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/installandupgrade/computersidersop.md) -- [I am getting an error about "GPSVC failed at sign-in". This error occurs exactly one time. What does this mean?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/installandupgrade/gpsvcfailed.md) -- [The removal of the assignment of application Endpoint Policy Manager Client-Side Extension (32bit) from policy failed](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/installandupgrade/assignmentremovalfailed.md) - -## Misc Installation questions - -- [What if I accidentally install the 32 bit version of Endpoint Policy Manager on a 64 bit machine or vice versa?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/miscquestions/bitversion.md) -- [Why does Endpoint Policy Manager require a CSE / client installation piece? I want to do it all using what Microsoft ships in the box but don't want to install anything else.](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/miscquestions/why.md) -- [How can I fix Outlook To-Do bar flashing when GP or Endpoint Policy Manager does a background refresh?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/miscquestions/outlook.md) -- [What must I install on Windows 7 to make Endpoint Policy Manager work as expected?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/miscquestions/windows7.md) - -## Best Practices / Keeping up to Date with releases - -- [Using Rings to Test and Update the Endpoint Policy Manager Client-Side Extension and/or Cloud Client (And How to Stay Supported)](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/bestpractices/rings.md) -- [What are the Endpoint Policy Manager Build and Version numbers?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/bestpractices/versions.md) -- [When should I upgrade or not upgrade the Endpoint Policy Manager CSE?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/bestpractices/frequency.md) -- [How often is Endpoint Policy Manager updated? And, must I update to the latest version? Are all versions supported?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/bestpractices/frequency_1.md) -- [How to trigger an update of the Endpoint Policy ManagerClient Side Extension and Cloud Client via command line using Endpoint Policy Manager Cloud versus Group Policy (OnPrem) Edition](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/bestpractices/commandline.md) - -## Updating Endpoint Policy Manager with Active Directory / GPOs - -- [How can I roll out the latest Endpoint Policy Manager CSE with Active Directory in a controlled manner using Rings ?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/updating/ringsupgrade.md) -- [CSE Autoupdate Update.Config file Usage and Parameters (before CSE 2725)](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/updating/config.md) -- [How can I use the Endpoint Policy ManagerPowerShell module to know which GPOs have any Endpoint Policy Manager data or directives?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/updating/datadirectives.md) - -## Backup and Restore - -- [Endpoint Policy Manager details with GPO contents appear deleted. How can I restore them?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/backupandrestore/restoredetails.md) - -## Uninstallation or Rollback of Endpoint Policy Manager - -- [How do I uninstall Endpoint Policy Manager?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/uninstallation/uninstall.md) -- [How to Rollback CSE version from newer to older using PowerShell](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/uninstallation/rollback.md) -- [How can I uninstall the Least Privilege Manager client for MacOS?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/uninstallation/uninstall_1.md) diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/methodpdqdeploy/_category_.json b/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/methodpdqdeploy/_category_.json deleted file mode 100644 index e59076ae3d..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/methodpdqdeploy/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Method PDQ Deploy Recommended", - "position": 30, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/miscquestions/_category_.json b/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/miscquestions/_category_.json deleted file mode 100644 index 8f8ce09de3..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/miscquestions/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Misc Installation Questions", - "position": 70, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/performancequestions/_category_.json b/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/performancequestions/_category_.json deleted file mode 100644 index 752d7bd550..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/performancequestions/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Performance Related Questions", - "position": 50, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/sccminitialinstall/_category_.json b/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/sccminitialinstall/_category_.json deleted file mode 100644 index 08baf7d5c3..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/sccminitialinstall/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Method SCCM Initial Install Or Other Systems", - "position": 20, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/uninstallation/_category_.json b/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/uninstallation/_category_.json deleted file mode 100644 index 1156ba77c6..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/uninstallation/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Uninstallation Or Rollback Of PolicyPak", - "position": 110, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/uninstallation/uninstall.md b/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/uninstallation/uninstall.md deleted file mode 100644 index f022cd5a80..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/uninstallation/uninstall.md +++ /dev/null @@ -1,51 +0,0 @@ ---- -title: "How do I uninstall Endpoint Policy Manager?" -description: "How do I uninstall Endpoint Policy Manager?" -sidebar_position: 10 ---- - -# How do I uninstall Endpoint Policy Manager? - -We suggest you read this all the way through before you attempt to uninstall Netwrix Endpoint Policy -Manager (formerly PolicyPak). - -You uninstall Endpoint Policy Manager the same way you installed it, but in reverse. In short, the -steps are: - -**Step 1 –** Delete GPOs which have Endpoint Policy Manager licensing information. - -**Step 2 –** Delete GPOs which have Endpoint Policy Manager directives (or delete the Endpoint -Policy Manager entries within the GPOs.) - -**Step 3 –** Remove the CSE from all client computers. Use Add/Remove Programs to do this manually, -or use your software installation software to perform the removal. - -**Step 4 –** Remove the Endpoint Policy Manager GPMC add-on from your management stations. - -**Step 5 –** Remove the Paks in the Central Store, or, if you used Share Based storage, remove the -share and delete the Pak files. - -Endpoint Policy Manager doesn't leave any trace on your domain, because the directives are contained -within the GPOs. - -That being said, if you merely delete the GPOs and/or remove the CSEs, you might leave data on the -machine. This might be desired or undesired. You should plan accordingly before performing the -removal steps above. - -In order to get revert to work, depending on the component or item type, you may need to pre-set up -your revert process in advance. - -For Endpoint Policy Manager Application Manager and all Group Policy Preferences settings you need -to expressly declare in advance what the revert behavior should be. By default, neither Endpoint -Policy Manager Application Manager nor the Group Policy Preferences will automatically revert when -you uninstall the Client Side Extension. You would be leaving the last written data behind. For more -information, please see -[How do I ensure that settings will revert when the policy no longer applies (by Group Policy, File, or Endpoint Policy Manager Cloud)?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/settingsrevert.md) - -Then, beyond that, most Endpoint Policy Manager specific settings will stop working and let you -continue onward. For more information on this process, please see -[What happens to each component when Endpoint Policy Manager gets unlicensed or the GPO or policy no longer applies?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/components_2.md) - -Finally, there is a specific cosmetic issue with regards to Endpoint Policy Manager Browser Router -removal and Default Browser. For more information on this issue and how to deal with it, please see -[When I unlicense or remove Endpoint Policy ManagerBrowser Router from scope,Endpoint Policy Manager Browser Router Agent still shows as OS "default browser". Why is that and is there a workaround?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/installation/defaultbrowser.md). diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/updating/_category_.json b/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/updating/_category_.json deleted file mode 100644 index b998a5cb83..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/updating/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Updating Endpoint Policy Manager With Active Directory GPOs", - "position": 90, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/installation/videolearningcenter/_category_.json b/docs/endpointpolicymanager/knowledgebase/installation/videolearningcenter/_category_.json deleted file mode 100644 index 5e102a37bc..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/installation/videolearningcenter/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Video Learning Center", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "videolearningcenter" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/installation/videolearningcenter/methodgpoandad/_category_.json b/docs/endpointpolicymanager/knowledgebase/installation/videolearningcenter/methodgpoandad/_category_.json deleted file mode 100644 index f9ba37ecc5..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/installation/videolearningcenter/methodgpoandad/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Method GPO And Active Directory Keeping Up To Date", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/installation/videolearningcenter/videolearningcenter.md b/docs/endpointpolicymanager/knowledgebase/installation/videolearningcenter/videolearningcenter.md deleted file mode 100644 index 2ee8d03e0a..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/installation/videolearningcenter/videolearningcenter.md +++ /dev/null @@ -1,13 +0,0 @@ ---- -title: "Video Learning Center" -description: "Video Learning Center" -sidebar_position: 20 ---- - -# Video Learning Center - -See the following Video topics for all things installation and upkeep. - -## Method GPO (and Active Directory): Keeping up to date - -- [Auto-updating the CSE](/docs/endpointpolicymanager/knowledgebase/installation/videolearningcenter/methodgpoandad/autoupdate.md) diff --git a/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/_category_.json b/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/_category_.json deleted file mode 100644 index 20659d890a..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Java Enterprise Rules Manager", - "position": 130, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/knowledgebase/_category_.json b/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/knowledgebase/_category_.json deleted file mode 100644 index 78bc685400..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/knowledgebase/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Knowledge Base", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "knowledgebase" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/knowledgebase/gettingstarted/_category_.json b/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/knowledgebase/gettingstarted/_category_.json deleted file mode 100644 index ee7419d8c4..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/knowledgebase/gettingstarted/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Getting Started", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/knowledgebase/knowledgebase.md b/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/knowledgebase/knowledgebase.md deleted file mode 100644 index 779adc2af3..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/knowledgebase/knowledgebase.md +++ /dev/null @@ -1,19 +0,0 @@ ---- -title: "Knowledge Base" -description: "Knowledge Base" -sidebar_position: 10 ---- - -# Knowledge Base - -See the following Knowledge Base articles for Java Enterprise Rules Manager. - -## Getting Started - -- [I'm using Endpoint Policy Manager Java Rules Manager, but I still get Java prompts when visiting a webpage, or attempting to run a Java applet. What can I do?](/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/knowledgebase/gettingstarted/javaprompts.md) -- [How are wildcards supported when used with IP addresses in the Java Rules Manager MMC console?](/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/knowledgebase/gettingstarted/wildcards.md) -- [How does Endpoint Policy Manager Java Rules Manager work with Virtualized Browsers and/or Java?](/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/knowledgebase/gettingstarted/virtualizedbrowsers.md) -- [How are URLs evaluated within Endpoint Policy Manager Java Rules Manager?](/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/knowledgebase/gettingstarted/evaluateurls.md) -- [Does Endpoint Policy Manager Java Rules Manager work with 64-bit versions of Java?](/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/knowledgebase/gettingstarted/version64bit.md) -- [What is the earliest version / what versions of Java are required for Java Rules Manager to work with?](/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/knowledgebase/gettingstarted/versionjava.md) -- [Why is the latest Java version installed being used instead of the version specified by Java Rules Manager?](/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/knowledgebase/gettingstarted/versionlatest.md) diff --git a/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/_category_.json b/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/_category_.json deleted file mode 100644 index 5e102a37bc..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Video Learning Center", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "videolearningcenter" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/gettingstarted/_category_.json b/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/gettingstarted/_category_.json deleted file mode 100644 index ee7419d8c4..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/gettingstarted/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Getting Started", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/methods/_category_.json b/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/methods/_category_.json deleted file mode 100644 index bf69c0ad15..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/methods/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Methods SCCM XML MDM Cloud PDQ Citrix Etc", - "position": 20, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/troubleshooting/_category_.json b/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/troubleshooting/_category_.json deleted file mode 100644 index 09e2a51e2d..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/troubleshooting/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Troubleshooting", - "position": 30, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/videolearningcenter.md b/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/videolearningcenter.md deleted file mode 100644 index d228556bbb..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/videolearningcenter.md +++ /dev/null @@ -1,33 +0,0 @@ ---- -title: "Video Learning Center" -description: "Video Learning Center" -sidebar_position: 20 ---- - -# Video Learning Center - -See the following Video topics for Java Enterprise Rules Manager. - -## Getting Started - -- [Use Group Policy to dictate which version of Java for what website](/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/gettingstarted/gettingstartedv.md) - -- [Endpoint Policy ManagerJava Rules Manager and Endpoint Policy Manager Browser Router: Better Together](/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/gettingstarted/browserrouter.md) - -- [Block ALL Java (with some exceptions)](/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/gettingstarted/block.md) - -- [Using item Level Targeting to Specify which version of Java to use](/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/gettingstarted/itemleveltargeting.md) - -- [Endpoint Policy Manager Java Rules Manager... Import from Oracle's Deployment Rule Sets](/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/gettingstarted/oracledeploymentrulesets.md) - -## Methods: SCCM, XML, MDM, Cloud, PDQ, Citrix, etc. - -- [Deploy and Manage Java with PDQ Deploy and Endpoint Policy Manager ](/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/methods/pdqdeploy.md) -- [Deploying Multiple Versions of Java to the Same Endpoint Using Endpoint Policy Manager and PDQ Deploy](/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/methods/versionsmultiple.md) -- [Use Endpoint Policy Manager Cloud to choose which version of Java for what website](/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/methods/cloud.md) -- [Use SCCM, KACE, etc to specify different websites for different Java](/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/methods/sccm.md) -- [Manage Java with Java Rules Manager and your MDM service](/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/methods/mdm.md) - -## Troubleshooting - -- [Endpoint Policy Manager Java Rules Manager: XML Surgery](/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/troubleshooting/xmlsurgery.md) diff --git a/docs/endpointpolicymanager/knowledgebase/knowledgebase.md b/docs/endpointpolicymanager/knowledgebase/knowledgebase.md deleted file mode 100644 index b562cacb69..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/knowledgebase.md +++ /dev/null @@ -1,35 +0,0 @@ ---- -title: "Netwrix Endpoint Policy Manager (formerly PolicyPak) Knowledge Base Articles" -description: "Netwrix Endpoint Policy Manager (formerly PolicyPak) Knowledge Base Articles" -sidebar_position: 20 ---- - -# Netwrix Endpoint Policy Manager (formerly PolicyPak) Knowledge Base Articles - -In the following topics, you will find the Endpoint Policy Manager Knowledge Base articles and Video -Learning Center sessions: - -| | | | -| ------------------------------------------------------------------------------------------------------------------------------------------------------ | --------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| ![allthingslicensing](/images/endpointpolicymanager/allthingslicensing.webp) | All Things Licensing |
  • [Knowledge Base](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/knowledgebase.md)
  • [Video Learning Center](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/videolearningcenter.md)
| -| ![gettingstartedmisc](/images/endpointpolicymanager/gettingstartedmisc.webp) | Getting Started with Endpoint Policy Manager (Misc) |
  • [Knowledge Base](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/knowledgebase.md)
  • [Video Learning Center](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/videolearningcenter.md)
| -| ![gettingstartedcloud](/images/endpointpolicymanager/gettingstartedcloud.webp) | Getting Started with Cloud |
  • [Knowledge Base](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/knowledgebase.md)
  • [Video Learning Center](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/videolearningcenter.md)
| -| ![allthingsinstallationupkeep](/images/endpointpolicymanager/allthingsinstallationupkeep.webp) | All Thinks Installation & Upkeep |
  • [Knowledge Base](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/knowledgebase.md)
  • [Video Learning Center](/docs/endpointpolicymanager/knowledgebase/installation/videolearningcenter/videolearningcenter.md)
| -| ![gettingstartedgrouppolicy](/images/endpointpolicymanager/gettingstartedmisc.webp) | Getting Started with Group Policy |
  • [Knowledge Base](/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/knowledgebase/knowledgebase.md)
  • [Video Learning Center](/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/videolearningcenter.md)
| -| ![gettingstartedmdm](/images/endpointpolicymanager/gettingstartedmdm.webp) | Getting Started with MDM |
  • [Knowledge Base](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/knowledgebase/knowledgebase.md)
  • [Video Learning Center](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/videolearningcenter.md)
| -| ![gpoexportmergeadmintemplatespreferences](/images/endpointpolicymanager/gpoexportmergeadmintemplatespreferences.webp) | GPO Export Merge, Admin Templates & Preferences 2.0 |
  • [Knowledge Base](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/knowledgebase.md)
  • [Video Learning Center](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/videolearningcenter.md)
| -| ![fileassociationsmanager](/images/endpointpolicymanager/fileassociationsmanager.webp) | File Associations Manager |
  • [Knowledge Base](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/knowledgebase/knowledgebase.md)
  • [Video Learning Center](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/videolearningcenter.md)
| -| ![browserrouter](/images/endpointpolicymanager/browserrouter.webp) | Browser Router |
  • [Knowledge Base](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/knowledgebase.md)
  • [Video Learning Center](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/videolearningcenter.md)
| -| ![leastprivilegemanager](/images/endpointpolicymanager/leastprivilegemanager.webp) | Least Privilege Manager Windows and Mac |
  • [Knowledge Base](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/knowledgebase.md)
  • [Video Learning Center](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/videolearningcenter.md)
| -| ![devicemanager](/images/endpointpolicymanager/devicemanager.webp) | Device Manager |
  • [Knowledge Base](/docs/endpointpolicymanager/knowledgebase/devicemanager/knowledgebase/knowledgebase.md)
  • [Video Learning Center](/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/videolearningcenter.md)
| -| ![networksecuritymanager](/images/endpointpolicymanager/networksecuritymanager.webp) | Network Security Manager |
  • [Video Learning Center](/docs/endpointpolicymanager/knowledgebase/networksecuritymanager/videolearningcenter/videolearningcenter.md)
| -| ![javaenterpriserulesmanager](/images/endpointpolicymanager/javaenterpriserulesmanager.webp) | Java Enterprise Rules Manager |
  • [Knowledge Base](/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/knowledgebase/knowledgebase.md)
  • [Video Learning Center](/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/videolearningcenter.md)
| -| ![startscreentaskbarmanager](/images/endpointpolicymanager/startscreentaskbarmanager.webp) | Start Screen & Task Bar Manager |
  • [Knowledge Base](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/knowledgebase.md)
  • [Video Learning Center](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/videolearningcenter.md)
| -| ![scriptstriggersmanager](/images/endpointpolicymanager/scriptstriggersmanager.webp) | Scripts & Triggers Manager |
  • [Knowledge Base](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/knowledgebase.md)
  • [Video Learning Center](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/videolearningcenter.md)
| -| ![featuremanagerwindows](/images/endpointpolicymanager/featuremanagerwindows.webp) | Feature Manager for Windows |
  • [Knowledge Base](/docs/endpointpolicymanager/knowledgebase/featuremanager/knowledgebase/knowledgebase.md)
  • [Video Learning Center](/docs/endpointpolicymanager/knowledgebase/featuremanager/videolearningcenter/videolearningcenter.md)
| -| ![remoteworkdeliverymanager](/images/endpointpolicymanager/remoteworkdeliverymanager.webp) | Remote Work Delivery Manager |
  • [Knowledge Base](/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/knowledgebase/knowledgebase.md)
  • [Video Learning Center](/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/videolearningcenter.md)
| -| ![rdpmanager](/images/endpointpolicymanager/rdpmanager.webp) | Endpoint Policy Manager RDP Manager |
  • [Video Learning Center](/docs/endpointpolicymanager/knowledgebase/endpointpolicyrdp/videolearningcenter/videolearningcenter.md)
| -| ![softwarepackagemanager](/images/endpointpolicymanager/softwarepackagemanager.webp) | Software Package Manager |
  • [Knowledge Base](/docs/endpointpolicymanager/knowledgebase/softwarepackage/knowledgebase/knowledgebase.md)
  • [Video Learning Center](/docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/videolearningcenter.md)
| -| ![applicationmanager](/images/endpointpolicymanager/applicationmanager.webp) | Application Manager |
  • [Knowledge Base](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/knowledgebase.md)
  • [Video Learning Center](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/videolearningcenter.md)
| -| ![gpcompliancereporter](/images/endpointpolicymanager/gpcompliancereporter.webp) | Endpoint Policy Manager GP Compliance Reporter |
  • [Knowledge Base](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/knowledgebase/knowledgebase.md)
  • [Video Learning Center](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/videolearningcenter.md)
| -| ![archive](/images/endpointpolicymanager/archive.webp) | Archive |
  • [Archive](/docs/endpointpolicymanager/knowledgebase/archive/overview.md)
| diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/_category_.json b/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/_category_.json deleted file mode 100644 index ac12d13766..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Least Privilege Manager", - "position": 100, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/_category_.json b/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/_category_.json deleted file mode 100644 index 78bc685400..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Knowledge Base", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "knowledgebase" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/eventing/_category_.json b/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/eventing/_category_.json deleted file mode 100644 index d4592f76d1..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/eventing/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Eventing", - "position": 100, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/eventing/reports.md b/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/eventing/reports.md deleted file mode 100644 index c8b8b59d76..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/eventing/reports.md +++ /dev/null @@ -1,165 +0,0 @@ ---- -title: "How to use Netwrix Auditor to Report on Endpoint Policy Manager events" -description: "How to use Netwrix Auditor to Report on Endpoint Policy Manager events" -sidebar_position: 20 ---- - -# How to use Netwrix Auditor to Report on Endpoint Policy Manager events - -This topic shows you how to generate reports for interesting events from the Endpoint Policy Manager -event logs, that you can then use to create LPM policies as needed. - -## Report - -![1325_1](/images/endpointpolicymanager/integration/auditor/1325_1.webp) - -Policy created in LPM using the report details above. - -![1325_2](/images/endpointpolicymanager/integration/auditor/1325_2.webp) - -## Getting Started - -In order to receive Endpoint Policy Manager reports for events via Netwrix Auditor, you need to -complete the following steps. - -**Step 1 –** Creating a monitoring plan for Endpoint Policy Manager events. - -**Step 2 –** Configuring sources, filters, events, database settings. - -**Step 3 –** Optional: configure alerts. - -## Creating a monitoring plan for Endpoint Policy Manager events - -Navigate to **Start** > Netwrix Auditor > Netwrix Auditor **Event Log Manager**. - -On the main page, you are prompted to select a monitoring plan. Click **Add** to add new plan. - -![1325_3](/images/endpointpolicymanager/integration/auditor/1325_3.webp) - -**Step 1 –** Give the new plan a descriptive name and select **Enable event log collection**. Then -add a **Notification recipient** email address. You can specify one or more email addresses for -users to receive daily Event Log collection status notifications. Use a semicolon to separate -addresses. - -![1325_4](/images/endpointpolicymanager/integration/auditor/1325_4.webp) - -**Step 2 –** In the **General** tab enter credentials for the account that will be used to collect -data from the endpoints. Use an account that has local admin rights on the endpoints, and one that -can also read Active directory. Then click the **Add** button next to the Monitored computers -section. - -![1325_5](/images/endpointpolicymanager/integration/auditor/1325_5.webp) - -**Step 3 –** Choose how you would like to add monitored computers, either by Computer name, by -Active Directory container, or via IP Range. - -![1325_6](/images/endpointpolicymanager/integration/auditor/1325_6.webp) - -:::note -You can add multiple types of computer items to your monitoring plan. -::: - - -![1325_7](/images/endpointpolicymanager/integration/auditor/1325_7.webp) - -**Step 4 –** In the **Notifications** tab you can configure SMTP settings. - -![1325_8](/images/endpointpolicymanager/integration/auditor/1325_8.webp) - -**Step 5 –** Under the **Audit Database** tab you can review and verify your database settings. -Netwrix Auditor Event Log Manager synchronizes Audit Database and reports settings with the default -Audit Database configuration from Netwrix Auditor Server. If this option is disabled, contact your -Netwrix Auditor Global administrator and make sure that these settings are properly configured in -Netwrix Auditor Server. See the Audit Database topic in the -[Netwrix Auditor > Configuration Documentation](https://helpcenter.netwrix.com/category/auditor_configuration) -for additional information. - -![1325_9](/images/endpointpolicymanager/integration/auditor/1325_9.webp) - -**Step 6 –** In the **Advanced** tab you can check if Network traffic compression is enabled -(recommended). Also, you can specify the notification delivery time. - -![1325_10](/images/endpointpolicymanager/integration/auditor/1325_10.webp) - -**Step 7 –** Filter out the desired events and get them into the Netwrix Auditor Reports. To do so, -get back to the **General** tab and configure the **Audit archiving filters**. - -![1325_11](/images/endpointpolicymanager/integration/auditor/1325_11.webp) - -**Step 8 –** Once there, you can add the filtering in the Inclusive filters section. Click **Add** -to proceed. - -In the next window, we need to specify the following parameters: - -- Filter name -- Description for the filter -- Event log – here we need to type in Endpoint Policy Manager manually, as it is not available in - the drop down list. -- Write to – here you can select the location to store filtered events, either a long-term archive - or a database. It is recommended to use both locations. - -![1325_12](/images/endpointpolicymanager/integration/auditor/1325_12.webp) - -**Step 9 –** Depending on targeted events, in the **Event Fields** tab you may enlist the event IDs -to capture. See the -[List of Endpoint Policy Manager Event Categories and IDs](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/eventcategories.md) topic for -additional information on event IDs. - -For example, here is the list of event IDs related to Endpoint Policy Manager Least Privilege -Manager Global Audit events: - -![1325_13](/images/endpointpolicymanager/integration/auditor/1325_13.webp) - -You may adjust the settings in the**Events Fields filtering** section according to your needs. - -Once the configuration is done, you may click **OK** and save all your progress so far. - -**Step 10 –** Go back to the main monitoring plan configuration window for Netwrix Auditor Event Log -Manager, and click **Configure** under alerts filtering: - -![1325_14](/images/endpointpolicymanager/integration/auditor/1325_14.webp) - -Then click **Add** to add a new alert. - -![1325_15](/images/endpointpolicymanager/integration/auditor/1325_15.webp) - -**Step 11 –** In the next window add alerts for any event IDs as needed using the screenshots below -as a guide. - -:::note -There is no need to configure anything under the **Insertion Strings** tab at this time. -::: - - -Single Event Alert Example: - -![1325_16](/images/endpointpolicymanager/integration/auditor/1325_16.webp) - -![1325_17](/images/endpointpolicymanager/integration/auditor/1325_17.webp) - -Group of Specific Events Alert Example: - -![1325_18](/images/endpointpolicymanager/integration/auditor/1325_18.webp) - -![1325_19](/images/endpointpolicymanager/integration/auditor/1325_19.webp) - -This is all the configuration required for Netwrix Auditor Event Log Manager to report on Endpoint -Policy Manager Events. - -**Step 12 –** Now, if you would like to review the event log reports, start the Netwrix Auditor -software and go to the **Reports** section. There, navigate to the following report path: -**Predefined** > **Windows Server**> **Event Log** > **All events by Computer** and click **View**. - -![1325_20](/images/endpointpolicymanager/integration/auditor/1325_20.webp) - -Here you can specify the conditions and filters to represent in the report, such as date range, -Event level etc. - -![1325_21](/images/endpointpolicymanager/integration/auditor/1325_21.webp) - -:::note -You can click on the interactive link in the **Date** column to see event details: -::: - - -![1325_22](/images/endpointpolicymanager/integration/auditor/1325_22.webp) diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/knowledgebase.md b/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/knowledgebase.md deleted file mode 100644 index 2b9b24a6b5..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/knowledgebase.md +++ /dev/null @@ -1,94 +0,0 @@ ---- -title: "Knowledge Base" -description: "Knowledge Base" -sidebar_position: 10 ---- - -# Knowledge Base - -See the following Knowledge Base articles for Least Privilege Manager. - -## Licensing - -- [What is the difference between Endpoint Privilege Manager Standard and Complete licenses?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/licensing/license.md) - -## Tips (How does PPLPM work?) - -- [Which account does an elevated process run within?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipspplpm/accountelevatedprocess.md) -- [Does Endpoint Privilege Manager block Macro attacks?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipspplpm/macroattacks.md) -- [How secure is it just to use the digital signature? Can someone spoof a digital signature?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipspplpm/digitalsignature.md) -- [Is Endpoint Privilege Manager compatible alongside an existing installation of Microsoft Applocker?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipspplpm/applocker.md) -- [How can I change the behavior of "Run as Admin" with Endpoint Privilege Manager and how has it changed from previous versions?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipspplpm/runasadmin.md) - -## Tips (Specific Workaround for Apps and Scenarios) - -- [How to create an LPM Policy for (SynTPEnh.exe) Synaptics Pointing Device Driver](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/synapticspointingdevicedriver.md) -- [Install Windows Fonts for users or Elevate end-users to install fonts themselves](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/installfonts.md) -- [How do I elevate MMC snap ins without granting administrative rights?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/mmcsnapin.md) -- [How do I use Least Privilege Manager to Elevate .reg files to allow import by standard users](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/registry.md) -- [How-to elevate Windows Defender Firewall in Endpoint Privilege Manager?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/windowsdefender.md) -- [How do I elevate installers that are classified as Installers but not Applications? Like Ninite, 7z, or Self-Extract?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/installers.md) -- [Allowing access/edit rights to specific files for standard users](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/editrights.md) -- [How to Elevate applications with a .application extension using Least Privilege Manager](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/applicationextension.md) -- [How do I elevate .MSP files such as Adobe Acrobat updates?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/mspfiles.md) -- [FTK Imager crashes with 'Server Busy' dialog box when "Image Mounting" while running elevated](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/serverbusy.md) - -## Tips (Files, Folders and Dialogs) - -- [How can I make all files in a folder, or all files in all recursive folders Elevated, Blocked, or Allow & Log?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsfilesfolders/allfiles.md) - -## Tips and SecureRun (TM) - -- [How can I allow "Inline commands" blocked by SecureRun when a random path or filename is created each time?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/allowinlinecommands.md) -- [How do I setup SecureRun when there are so many variables and still ensure my rules work no matter what version of the software I have I installed?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/setup.md) -- [When Endpoint Policy Manager SecureRun(TM) is turned on, PowerShell won't run. How can I re-enable this?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/enablepowershell.md) -- [What is the supported list of BLOCKED script types for Endpoint Policy Manager SecureRun™ ?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/blockedscripttypes.md) -- [How to run WebEx Meeting as regular user when SecureRun is enabled](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/webex.md) -- [How to install and run MYKI Password Manager as regular user when SecureRun is enabled](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/mykipasswordmanager.md) -- [How do I allow a Chrome extension blocked by SecureRun to be installed?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/chromeextension.md) -- [Least Privilege Manager and SecureRun Implementation Best Practices](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/bestpractices.md) -- [How does the option "Show Admin Approval dialog for untrusted application" in Admin Approval work?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/adminapprovalwork.md) - -## Tips for Admin Approval, Self Elevate, Apply on Demand, SecureCopy and UI Branding - -- [Can I use Endpoint Privilege Manager to LOWER / remove admin rights from Administrators from an application or process, like Internet Explorer?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsforadminapproval/reduceadminrights.md) -- [I elevated an application, but drag and drop between the elevated and other non-elevated applications isn't working anymore. What can I try?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsforadminapproval/dragdrop.md) -- [How do I use the Filter section in Endpoint Privilege Manager ?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsforadminapproval/scope.md) -- [How do I install an Active X control if it is not digitally signed?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsforadminapproval/activexcontrol.md) -- [How to Defend against malicious PowerShell attacks (DLLs)?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsforadminapproval/maliciousattacks.md) -- [How can I integrate Endpoint Privilege Manager and Servicenow (or any other help desk) via email?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsforadminapproval/servicenow.md) -- [Least Privilege Manager - How to create a Self-Elevation policy for local groups of Standalone computers](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsforadminapproval/selfelevation.md) -- [How does the "Show Pop-Up" message checkbox work along side "Force user re-authenticate" and "Justification text required" checkboxes?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsforadminapproval/optionsshowpopupmessage.md) -- [How does custom menu item text work after builds 23.8 and later?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsforadminapproval/custommenuitemtext.md) - -## Tips (Old, use only if asked) - -- [Endpoint Privilege Manager: How do I elevate single line commands (second batch file method)?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsold/singlelinecommands.md) -- [How to elevate Print driver installation using Endpoint Privilege Manager? (alternate method)](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsold/printerdriverinstall.md) - -## Troubleshooting - -- [What log can help me determine why an application (MSI, etc.) was ALLOWED, ELEVATED or BLOCKED?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/determinewhy.md) -- [Why doesn't Endpoint Privilege Manager work Windows 7 + SHA256 signed.JS and .VBS files ?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/supportedenvironments.md) -- [I want all the files in a folder to be ALLOWED when SecureRun is used. What is the correct syntax?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/correctsyntax.md) -- [If multiple Endpoint Privilege Manager rules would apply, which rule takes precedence?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/ruleprecedence.md) -- [How are DRIVE MAPS and UNC paths supported in Endpoint Privilege Manager?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/drivemaps.md) -- [Why does Endpoint Policy Manager SecureRun block "inline commands" and what can I do to overcome or revert the behavior ?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/inlinecommands.md) -- [How are wildcards supported when used with Path and Command-line arguments in Least Privilege Manager?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/wildcards.md) -- [How do I overcome OneDrive block prompts when SecureRun is on?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/onedrive.md) -- [Why is my File Info Deny rule for SQL MGMT Studio version 14.x and lower not working?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/ssms.md) -- [Why is my File Info Deny rule for WinSCP Setup 17.x and lower not working?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/winscp.md) -- [How-to Fix EXPLORER.EXE crash when right-clicking document files, pdf, docx, xlsx, etc.?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/explorercrash.md) -- [Error message The element 'emailSettings' in namespace "…AdminApproval" has incomplete content encountered when editing Admin Approval policy](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/emailsettings.md) -- [How-to troubleshoot LPM rules for Kaseya Agent Service?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/kaseyaagentservice.md) - -## Eventing - -- [How to forward interesting events for Least Privilege Manager (or anything else) to a centralized location using Windows Event Forwarding.](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/eventing/windowseventforwarding.md) -- [How to use Netwrix Auditor to Report on Endpoint Policy Manager events](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/eventing/reports.md) - -## Netwrix Privilege Secure for Access Management Integration - -- [How to Resolve Could not establish trust relationship for the SSL or TLS Secure Channel error message](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/netwrixprivilegesecure/establishtrust.md) -- [How does the Netwrix Privilege Secure MMC UI relate to the Endpoint Policy Manager MMC UI?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/netwrixprivilegesecure/mmc.md) -- [How can I create Endpoint Policy ManagerLeast Privilege Manager policies with Netwrix Privilege Secure (even when the Endpoint Policy Manager Client Side Extension is unlicensed?)](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/netwrixprivilegesecure/createpolicies.md) diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/licensing/_category_.json b/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/licensing/_category_.json deleted file mode 100644 index 4e06c332b6..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/licensing/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Licensing", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/macintegration/_category_.json b/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/macintegration/_category_.json deleted file mode 100644 index 82a5eb7ff6..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/macintegration/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Mac Integration", - "position": 80, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/macintegration/logs.md b/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/macintegration/logs.md deleted file mode 100644 index 1e90137c98..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/macintegration/logs.md +++ /dev/null @@ -1,162 +0,0 @@ ---- -title: "Logging guide for Endpoint Privilege Manager for Mac Clients" -description: "Logging guide for Endpoint Privilege Manager for Mac Clients" -sidebar_position: 10 ---- - -# Logging guide for Endpoint Privilege Manager for Mac Clients - -This guide will help you understand local Mac logging and also how to send those logs to Netwrix -Endpoint Policy Manager (formerly PolicyPak) Cloud if desired. - -## Understanding log files on the client - -The Endpoint Policy Manager logs are located in /Library/Application Support/PolicyPak/Logs. If -requested by Support, zip up these three logs. As the customer, you can find useful information -within endpointpolicymanagerd.log and cloud.log (details below). - -![1329_1_6e10551394ec326177434ffc228df475](/images/endpointpolicymanager/leastprivilege/mac/1329_1_6e10551394ec326177434ffc228df475.webp) - -### Understanding Endpoint Policy ManagerD.Log - -This log shows every process that ran on the computer. When installed, Endpoint Policy Manager needs -to monitor all processes on the endpoint to determine if there is a policy against that process and -then acts upon it if necessary. This log shows those processes and the policy information, if there -is a policy. - -No Existing Policy - -![1329_2_d6a33d883a790b8367004838c34e770f](/images/endpointpolicymanager/leastprivilege/mac/1329_2_d6a33d883a790b8367004838c34e770f.webp) - -Policy Exists - -![1329_3_4b3667fda4b8ee8bc6b9d9a09ef88ee8](/images/endpointpolicymanager/leastprivilege/mac/1329_3_4b3667fda4b8ee8bc6b9d9a09ef88ee8.webp) - -### Understanding Cloud.log - -Cloud.log contains actioned items from the endpointpolicymanagerd.log file, processes that ran by the user and -were either Allowed, Elevated or Blocked by Endpoint Policy Manager policies. - -:::note -To get a better understanding of how you policies are working, or not working, -endpointpolicymanagerd.log will tell not only what processes were affected by policies, but also what processes -weren’t – and maybe should have been. -::: - - -![1329_4_30c21b2015b47e5d92143f82a31997eb](/images/endpointpolicymanager/leastprivilege/mac/1329_4_30c21b2015b47e5d92143f82a31997eb.webp) - -## Setting up Endpoint Policy Manager Cloud Groups for Event Collection - -Having these logs locally is all well and good, but we also have the ability to centrally store -these logs and present the data in a more readable format. - -Our Event Collector in the cloud can take these events, upload them to your Endpoint Policy Manager -cloud instance, and allow you to pull reports based on this data. - -:::note -This is a paid, extra service that is not enabled by default. -::: - - -Event collection is part of the Group configuration. There are two types of groups that your -endpoints can be a part of: Built-in and Company. - -Built-in - -Without going into too many details here (there are KB articles where you can get more information -on this topic), the main Built-in Group is the Allgroup. Every endpoint that has an account will -automatically be a member of Windows or, in this case, MacOSs All group. If this group is configured -with Event Collection, all endpoints will send their cloud.log data up to the cloud. - -Computer - -Computer groups are created and configured by you, the Endpoint Policy Manager cloud instance -administrator. You specify what computer accounts are members here, and thereby only those endpoints -will upload the data you specify in that group Event Collection configuration. - -There are a few ways to add a computer to a group, but the most common way is directly through the -group. - -**Step 1 –** Highlight the group you want to add the computer(s) to. - -**Step 2 –** Click on **Add/Remove Computer from Group** (under Actions). - -![1329_5_cd439679970dd94379dc97da3de13756](/images/endpointpolicymanager/leastprivilege/mac/1329_5_cd439679970dd94379dc97da3de13756.webp) - -**Step 3 –** Click **Available Computers**. - -![1329_6_89a9d67a0c348b5ab03d304ea9392884](/images/endpointpolicymanager/leastprivilege/mac/1329_6_89a9d67a0c348b5ab03d304ea9392884.webp) - -**Step 4 –** Check the ones to add and click **Add**. - -Event Collection Configuration - -To configure Event Collection, highlight the group and click **Edit Group** under Actions. On the -resulting pop-up window, click on the **Event Collector** tab. - -![1329_7_44a2bef19cdb90973520bb3702397eb4](/images/endpointpolicymanager/leastprivilege/mac/1329_7_44a2bef19cdb90973520bb3702397eb4.webp) - -The **Event submission interval** dictates how often the logs get uploaded to the cloud. This is -separate and distinct from the **Refresh interval for computers** on the previous tab, which -dictates how often the endpoint synchronizes the policies with the cloud. - -You can also choose which events are collected and stored in the cloud. On large networks, this will -save you from a lot of noise when looking for specific things. We generally recommend starting will -All events until you figure out what it is you want to see, and then just select the ones you want. - -When **Selected Events** is selected, clicking on the Info icon brings up a list of Event IDs that -can be selected. In the image below are highlighted the two Event types that shown in the cloud.log -example above. - -![1329_8_464e110a1254c22ecac8a612b13ffc76](/images/endpointpolicymanager/leastprivilege/mac/1329_8_464e110a1254c22ecac8a612b13ffc76.webp) - -Notes on Collection configuration: - -- When the Allgroup is configured, all endpoints will receive the configuration. -- When a Parent group is configured, all child groups will, by default, inherit the configuration as - well. This behavior, however, can be altered to block inheritance. -- If a computer is a member of multiple groups, the behavior is essentially accumulative. That is, - all selected IDs will be included and uploaded in the shortest interval set. - -See the -[How can I keep the same or specify different parameters for Event Collection for child groups? How does a computer behave if a member of multiple groups?](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/eventcollection/childgroups.md) -topic for additional information. - -Forcing Event submission - -If you are testing, or just want to upload the data immediately, you can force the upload of the -cloud.log file with the following command: - -`policypak cloud-push-logs` - -![1329_9_e5dddf2ba28a115aa5782c49a21fbac6](/images/endpointpolicymanager/leastprivilege/mac/1329_9_e5dddf2ba28a115aa5782c49a21fbac6.webp) - -:::note -This command can be run by a standard user. It does not require elevated or administrative -rights to perform. -::: - - -## Reporting on Collected Events - -All the collected events can be accessed through the **Computers (Collected Events)** report on the -Reports tab and selecting **Endpoint Policy Manager Least Privilege Manager for macOS**. - -![1329_10_2ab64dc549729d2f51cdf61ab7d88108](/images/endpointpolicymanager/leastprivilege/mac/1329_10_2ab64dc549729d2f51cdf61ab7d88108.webp) - -Next, configure the time period you want to report on. The default is the beginning of the day, but -this can be altered to the desired start and stop time and date. Click **Show** to see the results. - -![1329_11_7135ed6ab54692983796dd995a2517e4](/images/endpointpolicymanager/leastprivilege/mac/1329_11_7135ed6ab54692983796dd995a2517e4.webp) - -The results can be filtered to show only the desired information. For example, show only specific -computers or only Elevation events. Every column can be filtered by clicking on the ellipsis within -the column header. - -![1329_12_3996f6bea2016ba07eaf96f5c05b43c0](/images/endpointpolicymanager/leastprivilege/mac/1329_12_3996f6bea2016ba07eaf96f5c05b43c0.webp) - -For offline analysis, the report can be exported to either Excel or, if very large, CSV format. This -can be done before or after filtering. - -![1329_13_50b225886bba8747a9460411f4662cc9](/images/endpointpolicymanager/leastprivilege/mac/1329_13_50b225886bba8747a9460411f4662cc9.webp) diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/netwrixprivilegesecure/_category_.json b/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/netwrixprivilegesecure/_category_.json deleted file mode 100644 index c983761b21..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/netwrixprivilegesecure/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Netwrix Privilege Secure For Access Management Integration", - "position": 110, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/_category_.json b/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/_category_.json deleted file mode 100644 index bf0aeb93f3..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsappsscenarios/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Tips (Specific Workaround For Apps And Scenarios)", - "position": 30, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsfilesfolders/_category_.json b/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsfilesfolders/_category_.json deleted file mode 100644 index 3d6eb57ee7..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsfilesfolders/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Tips (Files Folders And Dialogs)", - "position": 40, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsforadminapproval/_category_.json b/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsforadminapproval/_category_.json deleted file mode 100644 index 3b764696e8..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsforadminapproval/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Tips For Admin Approval Self Elevate Apply On Demand SecureCopy And UI Branding", - "position": 60, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsold/_category_.json b/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsold/_category_.json deleted file mode 100644 index 2ca5396b6c..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsold/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Tips (Old Use Only If Asked)", - "position": 70, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipspplpm/_category_.json b/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipspplpm/_category_.json deleted file mode 100644 index 5ef367b4cc..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipspplpm/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Tips (How Does PPLPM Work)", - "position": 20, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/_category_.json b/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/_category_.json deleted file mode 100644 index b0c32ef950..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Tips And SecureRun (TM)", - "position": 50, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/setup.md b/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/setup.md deleted file mode 100644 index da07216374..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/setup.md +++ /dev/null @@ -1,55 +0,0 @@ ---- -title: "How do I setup SecureRun when there are so many variables and still ensure my rules work no matter what version of the software I have I installed?" -description: "How do I setup SecureRun when there are so many variables and still ensure my rules work no matter what version of the software I have I installed?" -sidebar_position: 20 ---- - -# How do I setup SecureRun when there are so many variables and still ensure my rules work no matter what version of the software I have I installed? - -### Using Secure Run – Best Practices - -#### Getting Started - -Watch this quick video for tips on setting up Secure Run: -[Stop Ransomware and other unknown zero day attacks with Endpoint Policy Manager SecureRun(TM)](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/stopransomware.md). - -In addition we have a tool called Auto Rules Generator for generating rules from a machine that has -all your apps. It is in the Extras folder of the main Netwrix Endpoint Policy Manager (formerly -PolicyPak) download. For more information on this issue, please see -[Auto Rules Generator Tool (with SecureRun)](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/autorulesgeneratortool.md). - -#### How do we setup SecureRun when each version of the software references more than one .exe to start the program? - -- There is the option to **Apply to Child Processes**. In most cases this will elevate any other - processes needed. -- If you do not use this option, you have to create rules for each process. But you can use the Auto - Rules Generator to find all those .exe's and generate rules for all quickly. - -![315_1_lpm-faq-03-img-01](/images/endpointpolicymanager/leastprivilege/securerun/315_1_lpm-faq-03-img-01.webp) - -#### How do we setup SecureRun when there are so many variables and make them work no matter what version of the software was installed? - -- Start with the AutoRules Generator to try to mass generate the rules you need. -- In You can do a Single rule or a Combo - -![315_2_lpm-faq-03-img-02](/images/endpointpolicymanager/leastprivilege/securerun/315_2_lpm-faq-03-img-02.webp) - -- For a Single many customers will use Hashto ensure only that specific file is elevated. However - this doesn't allow for future versions to be allowed. -- For future proof situations, a Combo of a **Signature**, along with **File Info**, is often used. - That way you ensure that it is always that Vendor with the Signature, and with File Info you can - specify to allow Higher or Equals, thereby allowing future versions to be elevated. - -![315_3_lpm-faq-03-img-03](/images/endpointpolicymanager/leastprivilege/securerun/315_3_lpm-faq-03-img-03.webp) - -![315_4_lpm-faq-03-img-04](/images/endpointpolicymanager/leastprivilege/securerun/315_4_lpm-faq-03-img-04.webp) - -### Summary - -There are various ways to slice and dice to create the rules you want, but most common is to use -**Signature** with **File Info** set to Higher or Equals and, optionally Path with just filename -entered (though if the app changes names often you might omit using the Path). - -The more rule types you use the more secure it becomes, but keeping it usable is always the goal. -Generally only use Hash by itself because its pretty secure, and then some combination of the others -as noted above. diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/_category_.json b/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/_category_.json deleted file mode 100644 index fdb9c60748..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Troubleshooting", - "position": 90, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/inlinecommands.md b/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/inlinecommands.md deleted file mode 100644 index 1827789409..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/inlinecommands.md +++ /dev/null @@ -1,100 +0,0 @@ ---- -title: "Why does Endpoint Policy Manager SecureRun block \"inline commands\" and what can I do to overcome or revert the behavior ?" -description: "Why does Endpoint Policy Manager SecureRun block \"inline commands\" and what can I do to overcome or revert the behavior ?" -sidebar_position: 70 ---- - -# Why does Endpoint Policy Manager SecureRun block "inline commands" and what can I do to overcome or revert the behavior ? - -Windows operations like Command Prompt and PowerShell allow scripts to run. That is, they allow to -run various commands and NOT just executables (e.g. .exe files). - -Netwrix Endpoint Policy Manager (formerly PolicyPak) SecureRun automatically blocks unknown and -un-trusted scripts. You can read about these automatically blocked script types here: - -[What is the supported list of BLOCKED script types for Endpoint Policy Manager SecureRun™ ?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/blockedscripttypes.md) - -But it's possible to pass the commands on the command line - -For example, one can run something like this from the Run dialog (or in many other ways.) - -``` -cmd /c "mkdir C:\TEST & copy c:\Windows\notepad.exe C:\TEST" -``` - -![538_1_image-20201215000203-1](/images/endpointpolicymanager/leastprivilege/securerun/securerun_and_inline_commands.webp) - -Normally, users don't do this. But it could be valid during an application installation or program -setup. - -This technique is essentially what is used in much modern malware, as seen in this diagram. - -![538_2_image-20201215000203-2](/images/endpointpolicymanager/troubleshooting/leastprivilege/securerun/538_2_image-20201215000203-2.webp) - -When commands are run in this way, Endpoint Policy Manager SecureRun cannot know precisely what to -do. - -Remember that SecureRun's primary duty is to check "File Owner." And, since this inline command has -no owner, Endpoint Policy Manager SecureRun cannot make a definitive determination of "Should it run -or not?" - -In older versions of Endpoint Policy Manager, Endpoint Policy Manager Least Privilege Manager -SecureRun™ did not trap for these inline commands or make any determination. - -In current versions, Endpoint Policy Manager, Endpoint Policy Manager Least Privilege Manager -SecureRun™ assumes this behavior of inline commands should be interpreted as unexpected/bad -behavior. - -That being said, you might have a reliance on this behavior for an application setup or valid -process. As such you have three options as workarounds. - -## Option 1: Analyze the statement and create an explicit Allow and Log Rule (Most Secure) - -In this example, assume you determined you had an inline command you needed to explicitly overcome a -SecureRun block: - -``` -cmd /c "mkdir C:\TEST & copy c:\Windows\notepad.exe C:\TEST" -``` - -To overcome this, you would need to make an Executable rule (not a Script rule). You would specify a -Combo rule, then specify Path and Command Line Arguments like what's seen here. - -![538_3_image-20201215000203-3](/images/endpointpolicymanager/troubleshooting/leastprivilege/securerun/538_3_image-20201215000203-3.webp) - -The Path Condition part would be CMD.EXE: - -![538_4_image-20201215000203-4](/images/endpointpolicymanager/troubleshooting/leastprivilege/securerun/538_4_image-20201215000203-4.webp) - -Then the most secure would be "Strict equality" and then specify the arguments which make up the -remainder of the command. - -Note that other configurations may work, but only "Strict equality" would be the most secure. - -![538_5_image-20201215000203-5](/images/endpointpolicymanager/troubleshooting/leastprivilege/securerun/538_5_image-20201215000203-5.webp) - -Finally, set Allow And Log. - -![538_6_image-20201215000203-6](/images/endpointpolicymanager/troubleshooting/leastprivilege/securerun/538_6_image-20201215000203-6.webp) - -Now you have a rule which is explicitly enabled to overcome a SecureRun block. - -## Option 2: Explicitly set Endpoint Policy Manager SecureRun to Disabled (Least Secure; not recommended) - -If Endpoint Policy Manager SecureRun has no configuration or is explicitly Disabled, like what's -seen here, then the inline checking will not function. - -![538_7_image-20201215000203-7](/images/endpointpolicymanager/troubleshooting/leastprivilege/securerun/538_7_image-20201215000203-7.webp) - -## Option 3: Universally revert Endpoint Privilege Manager SecureRun™ Inline Command Processing Behavior to bypass inline commands (Less Secure; possibly recommended) - -In Endpoint Policy Manager CSE build 2725 we have introduced an ADMX setting entitled "Use legacy -(less secure) Endpoint Policy Manager Least Privilege Manager SecureRun Inline Processing Method." - -When this value is set to Enabled, you are telling the Endpoint Policy Manager Least Privilege -Manager that you want the SecureRun behavior to be reverted back to the original behavior. - -In this method, the Endpoint Policy Manager Least Privilege Manager SecureRun commandline parser -will ignore inline commands, and all processes like this will continue. - -![538_8_hfkb-1008-img-op-03-01_1379x575](/images/endpointpolicymanager/troubleshooting/leastprivilege/securerun/538_8_hfkb-1008-img-op-03-01_1379x575.webp) diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/_category_.json b/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/_category_.json deleted file mode 100644 index 5e102a37bc..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Video Learning Center", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "videolearningcenter" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/acltraverse/_category_.json b/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/acltraverse/_category_.json deleted file mode 100644 index e78fce2243..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/acltraverse/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "ACL Traverse NTFS And Registry", - "position": 50, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/_category_.json b/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/_category_.json deleted file mode 100644 index 0127d618fd..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Admin Approval Self Elevate Apply On Demand SecureCopy(TM) And UI Branding", - "position": 60, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/_category_.json b/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/_category_.json deleted file mode 100644 index e6e1eb3206..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Basics And Getting Started", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/_category_.json b/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/_category_.json deleted file mode 100644 index 1f6e32bf46..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Best Practices", - "position": 40, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/businesssolutions/_category_.json b/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/businesssolutions/_category_.json deleted file mode 100644 index dd82d7b4da..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/businesssolutions/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Business Solutions", - "position": 90, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/_category_.json b/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/_category_.json deleted file mode 100644 index e6254f9d86..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Eventing", - "position": 80, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/helperstoolsandtips/_category_.json b/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/helperstoolsandtips/_category_.json deleted file mode 100644 index f3546825e6..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/helperstoolsandtips/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Helpers Tools And Tips And Tricks", - "position": 70, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/_category_.json b/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/_category_.json deleted file mode 100644 index bfd79b6e40..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "How To And Tech Support", - "position": 20, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/_category_.json b/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/_category_.json deleted file mode 100644 index 81a731789e..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Mac Integration", - "position": 110, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/methods/_category_.json b/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/methods/_category_.json deleted file mode 100644 index 5a9c8fe303..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/methods/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Methods Cloud MDM SCCM PDQ", - "position": 30, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/netwrixprivilegesecure/_category_.json b/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/netwrixprivilegesecure/_category_.json deleted file mode 100644 index b73453e8fc..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/netwrixprivilegesecure/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Netwrix Privilege Secure For Access Management Integration", - "position": 100, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/videolearningcenter.md b/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/videolearningcenter.md deleted file mode 100644 index d10fa993d1..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/videolearningcenter.md +++ /dev/null @@ -1,121 +0,0 @@ ---- -title: "Video Learning Center" -description: "Video Learning Center" -sidebar_position: 20 ---- - -# Video Learning Center - -See the following Video topics for more information on Least Privilege Manager. - -## Basics and Getting Started - -- [Kill Local Admin Rights (Run applications with Least Privilege)](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/localadminrights.md) -- [Use Group Policy to remove local admin rights (then Endpoint Policy Manager to enable Least Privilege)](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/removelocaladmin.md) -- [Link to Computer, Filter by User](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/userfilter.md) -- [Installing applications-and-Preconfigured-Rules](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/installapplications.md) -- [Auto Rules Generator Tool (with SecureRun)](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/autorulesgeneratortool.md) -- [Endpoint Policy Manager Application Control with PP Least Privilege Manager](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/applicationcontrol.md) -- [Using Least Privilege Manager's SecureRun Feature](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/feature.md) -- [COM Support](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/comsupport.md) -- [Overcome UAC prompts for Active X controls](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/uacpromptsactivex.md) - -## How-To & Tech Support - -- [Elevate (or smack down) scripts and Java JAR files](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/scripts.md) -- [Enable end-users to install their own fonts](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/installfonts.md) -- [Manage, block and allow Windows Universal (UWP) applications](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/windowsuniversalapplications.md) -- [More security with Combo Rules](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/securitycomborules.md) -- [Least Privilege Manager: Deny Messages](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/denymessages.md) -- [Prevent Edge from Launching](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/preventedge.md) -- [Stop Ransomware and other unknown zero day attacks with Endpoint Policy Manager SecureRun(TM)](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/stopransomware.md) -- [Least Privilege Manager: Block All Unsigned with SecureRun](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/preventunsigned.md) -- [Endpoint Privilege Manager: Use Item Level Targeting to hone in when rules apply.](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/itemleveltargeting.md) - -## Methods: Cloud, MDM, SCCM, PDQ - -- [Use Endpoint Policy Manager Cloud to deploy PP Least Privilege Manager rules](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/methods/cloudrules.md) -- [Using Least Privilege Manager with your MDM service](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/methods/mdm.md) -- [Deploying Apps that Require Admin Rights Using Endpoint Policy Manager and PDQ Deploy](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/methods/pdqdeploy.md) -- [Blocking Malware with Endpoint Policy Manager and PDQ Deploy](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/methods/pdqdeployblockmalware.md) - -## Best Practices - -- [Best Practices for Elevating User-Based Installs](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/elevatinguserbasedinstalls.md) -- [PPLPM Elevating UWP Applications](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/elevateuwp.md) -- [Best Practices of MSI installations from the Windows Store (UWP Applications) ](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/msi.md) -- [Security and Child Processes](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/securitychildprocesses.md) -- [Increase security by reducing rights on Open/Save dialogs](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/opensavedialogs.md) -- [Endpoint Privilege Manager and Wildcards](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/wildcards.md) -- [Reduce or specify Service Account Rights](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/serviceaccountrights.md) -- [Block PowerShell in General, Open up for specific items](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/powershellblock.md) -- [SecureRun to block User AND System executables](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/usersystemexecutables.md) -- [Elevate apps as standard user, BLOCK other Admins](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/appblock.md) -- [Endpoint Policy Manager Least Priv Manager: Self Elevate Mode](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/selfelevatemode.md) - -## ACL Traverse: NTFS and Registry - -- [Endpoint Policy Manager: ACL Traverse to enable users to delete icons on desktop](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/acltraverse/deleteicons.md) -- [Endpoint Policy Manager and ACL Traverse: How to give rights to modify HOSTS files and similar](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/acltraverse/modifyhosts.md) -- [Endpoint Policy Manager ACL and File Traverse: Let any application in Programfiles overcome NTFS permissions](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/acltraverse/ntfspermissions.md) -- [Endpoint Policy Manager: Overcome ACLs in Registry even as Standard User](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/acltraverse/registry.md) - -## Admin Approval, Self Elevate, Apply on Demand, SecureCopy(TM), and UI Branding - -- [Admin Approval demo](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/demo.md) -- [Using Email / Long Codes](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/longcodes.md) -- [Understand "Enforce Admin Approval for all installers" behavior](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/enforce.md) -- [Endpoint Privilege Manager: Admin Approval Email method (with Notepad instead)](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/email.md) -- [Self Elevate Mode](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/demo.md) -- [Endpoint Privilege: Re-Authenticate with Self Elevate](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/reauthenticate.md) -- [Least Privilege Manager: Apply On Demand](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/applyondemand.md) -- [SecureCopy(TM). Empower users to copy then elevate items](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/securecopy.md) -- [Branding the UI and Dialogs](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/branding.md) -- [Endpoint Privilege Manager Automatic Rules Creation from Admin Approval Requests](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/autorulesfromadmin.md) - -## Helpers Tools & Tips and Tricks - -- [Overcome Network Card, Printer, and Remove Programs UAC prompts](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/helperstoolsandtips/uacprompts.md) -- [Endpoint Policy Manager Least Priv Manager Tools Setup](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/helperstoolsandtips/toolssetup.md) -- [Getting the helper tools as desktop shortcuts](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/helperstoolsandtips/helperdesktopshortcut.md) -- [Endpoint Privilege Manager: Install Printers via Native NTPRINT Dialog](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/helperstoolsandtips/ntprintdialog.md) -- [Endpoint Privilege Manager: Edit IP SETTINGS EDIT VIA WIN GUI](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/helperstoolsandtips/wingui.md) - -## Eventing - -- [Events](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/events.md) -- [Use Discovery to know what rules to make as you transition from Local Admin rights](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/discovery.md) -- [Endpoint Policy Manager Cloud + PPLPM + Events: Collect Events in the Cloud](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/cloudevents.md) -- [Using Windows Event Forwarding to search for interesting events](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/windowseventforwarding.md) -- [Auto-Create Policy from Global Audit event](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/globalauditevent.md) - -## Business Solutions - -- [Endpoint Policy Manager and WinGet: Overcome UAC prompts when standard users use Windows Package Manager](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/businesssolutions/winget.md) -- [Overcome Print Nightmare Standard User UAC Prompts](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/businesssolutions/printeruacprompts.md) -- [Microsoft WDAC recommended block rules Guidance](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/businesssolutions/microsoftrecommendations.md) -- [PPLPM: Deny Wins Over Self Elevate (using Java installation as example)](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/businesssolutions/denyselfelevate.md) - -## Netwrix Privilege Secure for Access Management Integration - -- [Netwrix Privilege Secure Client - Getting Started with MMC with/without Endpoint Policy Manager ](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/netwrixprivilegesecure/privilegesecure.md) -- [Netwrix Privilege Secure and the NPS/Endpoint Policy Manager Client](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/netwrixprivilegesecure/privilegesecureclient.md) -- [Endpoint Privilege Manager: NPS Self Elevate Mode (Paid Feature)](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/netwrixprivilegesecure/selfelevatemode.md) -- [Netwrix Privilege Secure and LICENSING](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/netwrixprivilegesecure/license.md) - -## Mac Integration - -- [Endpoint Policy Managerfor MacOS Installation (using Endpoint Policy Manager Cloud)](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/cloudinstall.md) -- [Mac and Jointoken](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/macjointoken.md) -- [Endpoint Policy Manager Least Priv Manager for Macs Application Package Support](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/applicationpackage.md) -- [Endpoint Policy Manager for Mac / Least Priv Manager: System Settings policy](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/systemsettings.md) -- [Endpoint Policy Manager Cloud and SUDO support](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/sudosupport.md) -- [Endpoint Policy Manager Cloud Mac + SUDO Using Wildcard Example](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/wildcards.md) -- [Application Launch Approval](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/applicationlaunch.md) -- [Endpoint Policy Manager Cloud +Least Privilege Manager for Mac Events collector](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/eventscollector.md) -- [Endpoint Policy Manager for Mac and Admin Approval](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/adminapproval.md) -- [Endpoint Privilege Manager for Mac: Mount / Unmount Part I](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/mountunmountpart1.md) -- [Endpoint Privilege Manager for Mac: Mount / Unmount Part II](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/mountunmounpart2.md) -- [Endpoint Policy Manager MacOS: Mac Finder Policies](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/finder.md) -- [Endpoint Policy Manager LPM for MacOS: Privilege Policies (for Helper Apps)](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/privilege.md) -- [Collect Diagnostics](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/collectdiagnostics.md) diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/_category_.json b/docs/endpointpolicymanager/knowledgebase/licensing/_category_.json deleted file mode 100644 index 9c7ea0187f..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/licensing/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "All Things Licensing", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/_category_.json b/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/_category_.json deleted file mode 100644 index 78bc685400..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Knowledge Base", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "knowledgebase" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/_category_.json b/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/_category_.json deleted file mode 100644 index 82a2e70d3a..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Licensing Troubleshooting and Un-Licensing: Active Directory (GPO and SCCM)", - "position": 75, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/_category_.json b/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/_category_.json deleted file mode 100644 index d005e7a207..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Licenses FAQ For Active Directory GPO And SCCM", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/domainmultiple.md b/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/domainmultiple.md deleted file mode 100644 index 5b014ab140..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/domainmultiple.md +++ /dev/null @@ -1,19 +0,0 @@ ---- -title: "I have multiple domains. How is that licensed?" -description: "I have multiple domains. How is that licensed?" -sidebar_position: 70 ---- - -# I have multiple domains. How is that licensed? - -Here is the general process: - -- You run the Licensing Tool once per domain and perform your count. -- Then, you add those numbers together. -- You then send us your License Request Keys (one for each domain). -- You pay for the computers you want to license per domain. - -We then create licensing keys, one for each domain. - -See -[How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/installall/installuniversal.md) diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqcloud/_category_.json b/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqcloud/_category_.json deleted file mode 100644 index 27899a67c9..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqcloud/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Licensing FAQ And Troubleshooting Endpoint Policy Manager Cloud", - "position": 20, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/installing/_category_.json b/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/installing/_category_.json deleted file mode 100644 index ecf72a03cd..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/installing/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Installing Licenses All Methods", - "position": 60, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/knowledgebase.md b/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/knowledgebase.md deleted file mode 100644 index 16f510464d..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/knowledgebase.md +++ /dev/null @@ -1,93 +0,0 @@ ---- -title: "Knowledge Base" -description: "Knowledge Base" -sidebar_position: 10 ---- - -# Knowledge Base - -See the following Knowledge Base articles for information regarding Endpoint Policy Manager -licensing. - -## Licenses FAQ for Active Directory (GPO and SCCM) - -- [Will I need a license server to manage my Endpoint Policy Manager licenses?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/server.md) -- [What if we license one OU, say, Sales Computers OU, then during the year we also want to license a peer OU, like Marketing Computers OU?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/ou.md) -- [We purchased our Endpoint Policy Manager license for a parent OU in our Active Directory structure. What happens if we need to add additional sub-OUs inside of the parent one? How will this affect our licensing?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/ousub.md) -- [We purchased our Endpoint Policy Manager license for a parent OU in our Active Directory structure. What happens if we need to add additional sub-OUs inside of the parent one? How will this affect our licensing?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/ousub.md) -- [I'm an OU admin and not a domain administrator. Can I use Endpoint Policy Manager in my OU and not the whole domain?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/domainou.md) -- [I can only EDIT GPOs and not create them. Can I still use Endpoint Policy Manager?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/gpoedit.md) -- [I want to license the whole domain (or main OU), but I don't want to pay for every computer in that domain (or main OU)](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/domain.md) -- [I have multiple domains. How is that licensed?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/domainmultiple.md) -- [Why does License Tool ask Who am I and Where do I want to use Endpoint Policy Manager?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/scope.md) -- [Does the Licensing Tool (LT.exe) count disabled Active Directory computer accounts ?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/disabledcomputer.md) -- [Does LT count users?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/users.md) -- [The License Tool (LT) isn't permitting me to install License Files (or I am using AGPM, GPA, or GPOAdmin.) What should I try?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/wizard.md) -- [Licence Tool recommends I enforce the links on the licensing GPOs. Should I do this, and why is this recommended?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/enforced.md) - -## Licensing FAQ and Troubleshooting: Endpoint Policy Manager Cloud - -- [How do I license machines to work on-premise if I'm an Endpoint Policy Manager Cloud Customer?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqcloud/onpremise.md) -- [How do I stop getting emails which say : "You have less than X% of your Endpoint Policy Manager licenses available for your company"](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqcloud/notifications.md) -- [How do I understand my cloud licenses?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqcloud/licensestatus.md) -- [How exactly does monthly billing work with Endpoint Policy Manager SaaS Edition?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqcloud/billing.md) -- [ What happens if PPCloud computers are offline for more than 7 days?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqcloud/reclaimed.md) - -## Requesting Licenses FAQ and Troubleshooting (all Methods) - -- [What is the fastest way to get started in an Endpoint Policy Manager trial, without running the License Request Tool?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingall/trial.md) -- [Why do I have to run the licensing tool / what information is gathered and sent to Endpoint Policy Manager for my trial (or becoming a customer?)](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingall/tool.md) -- [What Logs do I need to send for troubleshooting LT (License Tool) or other MMC / .Net related functions?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingall/logs.md) -- [How do I manually count the number of computers in Intune, and manually acquire the Intune "Company Name?"](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingall/intune.md) -- [What are the most common questions about editing policies using the Endpoint Policy ManagerCloud policy editor (instead of using the MMC to upload to Endpoint Policy Manager Cloud?)](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/knowledgebase/clienttips/edit.md) - -## Requesting Licenses FAQ and Troubleshooting (Virtualization, Citrix, WVD, etc.) - -- [How are Terminal Services and/or Citrix connections licensed?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/vertualizationcitrix/terminalservices.md) -- [How do I license my Citrix, RDS, WVD, VDI or other multi-session Windows version with Endpoint Policy Manager Cloud ?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/vertualizationcitrix/multisession.md) -- [Why must I run LT from a Windows Server if I want to properly count Citrix / Terminal Services / RDS connections?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/vertualizationcitrix/tool_1.md) -- [What must I show to prove my current RDS and/or Citrix, or other Multi-Session windows concurrent license count for Endpoint Policy Manager Cloud (or if on-prem LT cannot auto-discover them)?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/vertualizationcitrix/count.md) -- [Are there any special Endpoint Policy Manager licensing issues for virtual desktops?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/vertualizationcitrix/desktops.md) - -## Licensing: Requesting Licenses: MDM - -- [When licensing Endpoint Policy Managerwith an MDM provider, what do I need to send in to Endpoint Policy Manager? ](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/setup.md) -- [If I have both Azure joined and Hybrid Azure AD joined machines, how do I count the exact number of licenses I need?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/entraid.md) -- [What if I have multiple domain names within the MDM I want to license?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/domainmultiple.md) -- [How do I license Endpoint Policy Manager if I use Azure / Azure Active Directory / Azure Active Directory Domain Services / AD Domain Controllers in Azure?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/hybrid.md) -- [How are BYOD "Workplace Joined" (aka Intune Registered) counted toward licensing?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/jointype.md) -- [I'm having trouble running the Licensing Tool (LT) and counting computers with Intune. What troubleshooting information can I send Endpoint Policy Manager support?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/tool.md) -- [What is the difference if I license my MDM machines' CSE using COMPANY NAME vs. UPN name?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/name.md) -- [Why does the Endpoint Policy Manager Licensing Tool (LT.EXE) require admin rights to query for Intune / Azure data?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/adminrights.md) - -## Licensing: Installing Licenses: All Methods - -- [What is the best way to roll out New Universal licenses if I already have Original licenses?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/installing/universal.md) -- [I received multiple license files back from the Sales team (one for each Endpoint Policy Manager component.) Should I install all of them?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/installing/filemultiple.md) - -## Licensing Troubleshooting: All Methods - -- [How can I tell how a machine is licensed (by GPO, MDM, or XML file), and also know for what components it is licensed?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/components.md) -- [I have a pop-up saying "License expires soon" or "Licenses expire in X days" when editing a GPO. What do I do?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/expires.md) -- [How do I turn on MMC Snap in Logs (for troubleshooting MMC Editing or Licensing Import)?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/mmcsnapinlogs.md) -- [I unlicensed my machine by removing a universal license, my machine still appears licensed. Why is this?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/universal.md) -- [Action Required for Endpoint Policy Manager Customers using Legacy Licenses](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/legacy.md) -- [How do I make the Grace Period licensing pop-up go away?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/graceperiod.md) -- [Action Recommended Endpoint Policy Manager Customers to transition from "Enterprise" Licenses to "Enterprise Full" licenses.](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/enterprisefull.md) -- [Gathering License Tool logs (LT.exe)](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/toollogs.md) - -## Licensing Troubleshooting and Un-Licensing: Active Directory (GPO and SCCM) - -- [What happens to each component when Endpoint Policy Manager gets unlicensed or the GPO or policy no longer applies?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/components_2.md) -- [My organization doesn't permit me to run the LT (Endpoint Policy Manager Licensing Tool) or provide the XML information it produces. What are my other options?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/options.md) -- [What if I want to unlicense specific components via ADMX or Endpoint Policy Manager Cloud?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/componentscloud.md) -- [I just installed new license files / new GPOs. Should I keep or delete the old license files / GPOs?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/fileold.md) -- [How do I specifically exclude or prevent a component from performing processing by modifying the license file?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/componentsexclude.md) -- [How can I verify, test and/or reset my Domain Join (aka SecureChannel) from the endpoint to domain controller?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/reset.md) -- [Why is Endpoint Policy Manager Preferences (original version) "forced disabled" by default?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/forceddisabled.md) - -## Misc Licensing Questions - -- [When and why would I license Endpoint Policy Manager on servers?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/miscquestions/whenwhy.md) -- [What items and components are licensed, and what components are free?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/miscquestions/components_1.md) -- [Why must I transition from Legacy to Universal licenses (and what are the differences?)](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/miscquestions/transition.md) diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/miscquestions/_category_.json b/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/miscquestions/_category_.json deleted file mode 100644 index 7a81872c55..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/miscquestions/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Misc Licensing Questions", - "position": 90, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/miscquestions/transition.md b/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/miscquestions/transition.md deleted file mode 100644 index 4a3c39483c..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/miscquestions/transition.md +++ /dev/null @@ -1,71 +0,0 @@ ---- -title: "Why must I transition from Legacy to Universal licenses (and what are the differences?)" -description: "Why must I transition from Legacy to Universal licenses (and what are the differences?)" -sidebar_position: 30 ---- - -# Why must I transition from Legacy to Universal licenses (and what are the differences?) - -Starting in January 2021, Netwrix Endpoint Policy Manager (formerly PolicyPak) transitioned the -licensing model from Legacy to Universal licenses. -In 2022, the Endpoint Policy Manager CSE (any version) stopped honoring legacy licenses -Additionally, to take advantage of some features, like Capabilities (explained below) you must have -the latest CSEs and a Universal license. - -## Understanding Legacy Licenses - -Legacy licenses take the form of multiple keys, one for each component. - -Whenever we have a new component, we would issue your company a new legacy license for that -component. - -![861_1_hfkb-1130-img-01](/images/endpointpolicymanager/license/861_1_hfkb-1130-img-01.webp) - -An individual legacy license XML looks like this and contains the product (component) and the scope -of where it is licensed to: - -![861_2_hfkb-1130-img-02_950x238](/images/endpointpolicymanager/license/861_2_hfkb-1130-img-02_950x238.webp) - -You then use the Group Policy editor to consume the license and the result would look something like -this. - -![861_3_hfkb-1130-img-03_950x447](/images/endpointpolicymanager/license/861_3_hfkb-1130-img-03_950x447.webp) - -Additionally, if you wanted to use Endpoint Policy Manager with an MDM service, we needed to cut a -second set of keys just for that scenario. That second set of licenses is an .MSI which also contain -the XMLs which enable Endpoint Policy Manager to work with an MDM service. - -Tip: You can use 7zip to open an MSI and see the licenses, like this.: - -![861_4_hfkb-1130-img-04_950x320](/images/endpointpolicymanager/license/861_4_hfkb-1130-img-04_950x320.webp) - -## Understanding Universal Licenses - -Universal licenses solve a lot of problems around key generation: - -- Instead of having one set for Active Directory (GPO / SCCM or other on-prem and another for MDM, - we can generate one key which can be used in both places. -- Administrators may select which types of policies are honored (Group Policy-based, XML-files - based, or coming from MDM). -- All components purchased can be in one XML file -- Some components which have capabilities may be specified with those capabilities. This is not - available in Legacy license type. -- For MDM customers, we can specify EITHER Intune Company name or UPN name. - [What is the difference if I license my MDM machines' CSE using COMPANY NAME vs. UPN name?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/name.md) - This is not available for Legacy license type. -- Administrators may disable a specifically licensed component, without having to request Endpoint - Policy Manager support to re-cut the license. - [How do I specifically exclude or prevent a component from performing processing by modifying the license file?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/componentsexclude.md) -- The license may be wrapped up by the admin as a .MSI and re-deployed without contacting Endpoint - Policy Manager support to make a .MSI. - [How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/installall/installuniversal.md) - -![861_5_hfkb-1130-img-05_950x431](/images/endpointpolicymanager/license/861_5_hfkb-1130-img-05_950x431.webp) - -In the Group Policy editor you can consume the Universal license and it will look like this. - -![861_6_hfkb-1130-img-06_950x670](/images/endpointpolicymanager/license/861_6_hfkb-1130-img-06_950x670.webp) - -And finally using` PPUPDATE` command on the endpoint, you can see how you are licensed : - -![861_7_hfkb-1130-img-07_950x984](/images/endpointpolicymanager/license/861_7_hfkb-1130-img-07_950x984.webp) diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingall/_category_.json b/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingall/_category_.json deleted file mode 100644 index 92f9c5701b..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingall/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Requesting Licenses FAQ And Troubleshooting All Methods", - "position": 30, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingall/trial.md b/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingall/trial.md deleted file mode 100644 index e1d89bb868..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingall/trial.md +++ /dev/null @@ -1,143 +0,0 @@ ---- -title: "What is the fastest way to get started in an Endpoint Policy Manager trial, without running the License Request Tool?" -description: "What is the fastest way to get started in an Endpoint Policy Manager trial, without running the License Request Tool?" -sidebar_position: 10 ---- - -# What is the fastest way to get started in an Endpoint Policy Manager trial, without running the License Request Tool? - -We know you want to get started with a Netwrix Endpoint Policy Manager (formerly PolicyPak) trial -fast. - -Good news, we only need a few pieces of information to get started. Typically we can get started -with only: - -- Your domain name (for GPO/AD Method) -- Your Intune company name (for Intune method) -- Or, nothing at all, which works for all methods:Just rename a computer. - -:::warning -The details in this article get you started without having to count the number of -computers, which means we cannot get you a formal quote. Only when you count the computers are we -able to provide you a formal quote. This process is slower and optional, but does mean we can get -you a formal quote. -See [How to Request Licenses from Endpoint Policy Manager by Creating a "License Request Key"](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/requestall/licenserequestkey.md) -for additional information. Then send your License Request Key XML to your sales person to get a -formal quote generated. -::: - - -So, here's the rundown of how you can get a trial license quickly.. You need to pick just one: - -- Option 1 — On-Prem or MDM: No license at all, by renaming a computer to have Computer in the - name(recommended). -- Option 2 — Licenses coming automatically from Endpoint Policy Manager Cloud. -- Option 3 — On-Prem / GPO Method: You give us your domain name, we give you back a Trial License - File. -- Option 4 — Intune-specific method: You give us your INTUNE company name,, and we give you back a - Trial License File. -- Option 5 — Non-Intune/Other-MDM Method: You give us your UPN name, and we give you back a Trial - License File. - -## Option 1: On-Prem or MDM: No license at all, by renaming a computer to have Computer in the name(recommended) - -With Endpoint Policy Manager, you don't even need a license file from us to get started. - -:::note -This is the recommended  way to get going quickly with Endpoint Policy Manager. -::: - - -Simply rename a computer to have Computer in the name, and that's it. You're done. Here are the two -methods of how to do that in Windows. - -Here's a video showing what happens when you rename a computer and how Endpoint Policy Manager -reacts:[Testing and Troubleshooting By Renaming an endpoint Computer](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/testlabbestpractices/renameendpoint.md) - -![812_1_image001](/images/endpointpolicymanager/license/812_1_image001.webp) - -After you rename your computer to have Computer in the name, then: - -- Follow these directions to get started with on-Prem Active Directory/ Group Policy: Getting - Started with Group Policy > [Knowledge Base](/docs/endpointpolicymanager/knowledgebase/knowledgebase.md) and/or -- Follow these directions to get started with Endpoint Policy Manager and Intune or another MDM - (making sure to follow the "Walk Before You Run" video): Getting Started with MDM > - [Video Learning Center](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/videolearningcenter.md) - -## Option 2: Licenses coming automatically from PolicyPak Cloud - -If you're trying our Endpoint Policy Manager Enterprise, Endpoint Policy Manager Professional or -Endpoint Policy Manager SaaS, they all come with an included Endpoint Policy Manager Cloud license.  -Your trial should automatically generate credentials -to [cloud.endpointpolicymanager.com](http://cloud.endpointpolicymanager.com/) (aka the Endpoint Policy Manager Cloud -Service.) - -When you install the Endpoint Policy Manager Cloud client, a license is automatically taken from -Endpoint Policy Manager Cloud (and also the Endpoint Policy Manager Client Side Extension is -installed.) You install a new machine into Endpoint Policy Manager cloud by installing the Endpoint -Policy Manager Cloud Client, as shown below. - -![812_2_image002](/images/endpointpolicymanager/license/812_2_image002.webp) - -To get started immediately with Endpoint Policy Manager Cloud, check out the Getting Started with -Cloud > [Video Learning Center](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/videolearningcenter.md). - -## Option 3: On-Prem / GPO Method: You give us your domain name, we give you back a Trial License File. - -If you want to use Active Directory / GPO method to deliver Endpoint Policy Manager settings, we -need your domain name. And if you have multiple domains, that's fine. We can make you one key which -contains all your domain names. - -The best way to get the domain name would be to run this simple Powershell command: - -``` -$env:userdnsdomain -``` - -It will then produce the output of the domain name, which is the minimum requirement to make you a -license key. - -![812_3_get-fqdn-with-powershell](/images/endpointpolicymanager/license/812_3_get-fqdn-with-powershell.webp) - -Once we generate the key, it will be in the Endpoint Policy Manager -Portal.[How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/installall/installuniversal.md)Then -follow these directions to get started with on-Prem Active Directory/ Group Policy: Group -Policy > [Knowledge Base](/docs/endpointpolicymanager/knowledgebase/knowledgebase.md) - -## Option 4: Intune-specific method: You give us your INTUNE company name, and we give you back a Trial License File. - -If you're using Intune specifically, we can turn on Endpoint Policy Manager for your Intune -instance. We need the Intune Company name. Run this PowerShell script, which will return -`INTUNECOMPANYNAME.TXT`, and send it to your sales person. - -``` -[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12 -Install-PackageProvider -Name NuGet -Scope CurrentUser -Force -Install-Module -Name Microsoft.Graph.Intune -Repository PSGallery -Scope CurrentUser -Force -Connect-MSGraph -AdminConsent -Get-Organization | Select @{N = 'CompanyName'; E = { $_.displayName } } | out-file INTUNECOMPANYNAME.TXT -``` - -Once we generate the key, it will be in the Endpoint Policy Manager Portal. Download the key and -install it using theinstructions found -here: [How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/installall/installuniversal.md) - -Then follow these directions to get started with Endpoint Policy Manager and Intune (making sure to -follow the "Walk Before You Run" video): Getting Started with MDM > -[Video Learning Center](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/videolearningcenter.md) - -## Option 5: Non-Intune/Other-MDM Method: You give us your UPN name, and we give you back a Trial License File. - -When you enroll machines into your MDM, you do so with a UPN name. Start out by noting which UPN -name you use, such as [\*@fabrikam.com,](mailto:*@fabrikam.com) or whatever yours is. We recommend -you take a screenshot of this page from an enrolled Windows 10 machine, and then continue. - -![812_4_sdfg](/images/endpointpolicymanager/license/812_4_sdfg.webp) - -Once we generate the key, it will be in the Endpoint Policy Manager Portal. Download the key and -install it using these -instructions: [How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/installall/installuniversal.md) - -Then follow these directions to get started with Endpoint Policy Manager and your MDM service, -making sure to follow the "Walk Before You Run" video: Getting Started with MDM > -[Video Learning Center](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/videolearningcenter.md) diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/_category_.json b/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/_category_.json deleted file mode 100644 index 6583ae5ccc..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Requesting Licenses MDM", - "position": 50, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/setup.md b/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/setup.md deleted file mode 100644 index c7c6a27967..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/setup.md +++ /dev/null @@ -1,102 +0,0 @@ ---- -title: "When licensing Endpoint Policy Managerwith an MDM provider, what do I need to send in to Endpoint Policy Manager?" -description: "When licensing Endpoint Policy Managerwith an MDM provider, what do I need to send in to Endpoint Policy Manager?" -sidebar_position: 10 ---- - -# When licensing Endpoint Policy Managerwith an MDM provider, what do I need to send in to Endpoint Policy Manager? - -Netwrix Endpoint Policy Manager (formerly PolicyPak) can work with and be licensed with nearly any -MDM service. Use this table below to determine how to get licensed: - -- Intune (Automatic) — Use the Endpoint Policy Manager Portal and download the BITS. Then run the - Licensing Tool (LT) to acquire the information and save it to your License Request Key. See - [How to Request Licenses from Endpoint Policy Manager by Creating a "License Request Key"](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/requestall/licenserequestkey.md) -- Intune (Alternate) — Only if asked, follow the directions on this page. -- VMware Workspace One — Follow the directions on this page. -- Citrix CEM — Follow the directions on this page. -- MobileIron — Follow the directions on this page. -- Other MDMs may or may not be supported, but we'll try. Follow the directions on this page. - -To accurately create license keys for you,Endpoint Policy Manager needs three pieces of information: - -- Your Universal Principal Name (UPN) -- How many licenses are required and -- Proof of ownership of that MDM / domain. - -## Your UPN name (all MDM services) - -When you enroll machines into your MDM, you do so with a UPN name. Start out by noting which UPN -name you use, @fabrikam.com in our example. We recommend you take a screenshot of this page from an -enrolled Windows 10 machine, then continue. - -![44_1_sdfg](/images/endpointpolicymanager/license/812_4_sdfg.webp) - -## License count - -To accurately license your MDM installation, Endpoint Policy Manager needs the following -information: - -- How many machines are actively enrolled in your MDM service -- Screenshots demonstrating the screen shots are of an MDM account your own or control - -If you have a mix of on-prem AD machines, Azure joined machines and Hybrid Azure AD machines please -see - [If I have both Azure joined and Hybrid Azure AD joined machines, how do I count the exact number of licenses I need?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/entraid.md) -for additional information on how to express your count. - -## The Billing Process - -**Step 1 –** Send screenshots of your current usage (see steps below for your specific MDM solution) - -**Step 2 –** Express your expected growth for the upcoming year - -**Step 3 –** You are billed for the total expected usage - -### Windows Intune (alternate method — do not use unless the LT tool isn't working or you are otherwise directed to perform these manual steps.) - -If in the Azure portal, ensure you are in the Intune section. - -![44_2_image-20200815220310-23](/images/endpointpolicymanager/license/mdm/44_2_image-20200815220310-23.jpeg) - -The device Screenshot will demonstrate the total Windows Devices and Tenant ownership: - -![44_4_image-20200815220310-24](/images/endpointpolicymanager/license/mdm/44_4_image-20200815220310-24.jpeg) - -### Workplace One (Airwatch) - -In your Airwatch portal: - -- Click on the **Devices** icon -- In Platforms, locate the Windows Desktops section and take a screenshot of the entire window - -![44_6_image-20200815220310-25](/images/endpointpolicymanager/license/mdm/44_6_image-20200815220310-25.jpeg) - -### MobileIron - -Log into your MobileIron Portal. Your dashboard should show you the number of devices you have -enrolled if Device by OS Type is on your dashboard. If the Pie Chart is shown, click the icon in the -lower-left corner of the Device by OS Type window to change to the Bar Chart. - -![44_8_image-20200815220310-26](/images/endpointpolicymanager/license/mdm/44_8_image-20200815220310-26.jpeg) - -Take a screen shot of the device count and account ownership as per the screenshots below (it may -take 2 captures) - -![44_10_image-20200815220310-27_950x711](/images/endpointpolicymanager/license/mdm/44_10_image-20200815220310-27_950x711.jpeg) - -### Citrix Endpoint Management (CEM – formally XenMobile) - -Option 1: - -On the Analyze page of the CEM Portal, click on the Dashboard. Take a screenshot showing Managed -devices by Platform and the ownership in the top right-hand corner - -![44_12_image-20200815220310-28](/images/endpointpolicymanager/license/mdm/44_12_image-20200815220310-28.webp) - -Option 2: - -From the Analyze page, go to Reporting > Devices & Apps and take a screenshot showing the Device -count and Ownership: - -![44_14_image-20200815220310-29](/images/endpointpolicymanager/license/mdm/44_14_image-20200815220310-29.webp) diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/_category_.json b/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/_category_.json deleted file mode 100644 index 6bd13b6d40..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Licensing Troubleshooting All Methods", - "position": 70, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/legacy.md b/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/legacy.md deleted file mode 100644 index 4dd88945e6..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/legacy.md +++ /dev/null @@ -1,183 +0,0 @@ ---- -title: "Action Required for Endpoint Policy Manager Customers using Legacy Licenses" -description: "Action Required for Endpoint Policy Manager Customers using Legacy Licenses" -sidebar_position: 60 ---- - -# Action Required for Endpoint Policy Manager Customers using Legacy Licenses - -## What is happening: - -- The Netwrix Endpoint Policy Manager (formerly PolicyPak) CSE (endpoint piece) is hardcoded to stop - honoring Legacy licenses on Feb 28, 2023… even if you have a Valid Legacy license hitting the - machine. - -## Why is this happening: - -- We started delivering Universal licenses in Jan 2021 thus giving customers two years to upgrade to - make the switch. This is your three-month (and likely final) warning of the impending requirement. - -## Who is NOT affected by this: - -- If you are using CLOUD licensing, you are not affected. -- If you already have Universal licenses in place and no Legacy licenses in place, you are not - affected. - -## Who IS affected by this: - -- If you are using GPO or MDM / XML licensing with Legacy licenses only and... -- You are using CSE version 2687 (21.1.2687.802) or later. - -… Then you are affected. - -## Is this a security concern? - -- No. This is not a security concern. - -## How do I know if I'm using LEGACY licenses, UNIVERSAL licenses, or both? - -- Please watch this video to help you determine your position and situation plus some advice on what - to do. -- Video: [Legacy License Retirement Guidance (for Feb 28, 2023)](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/troubleshooting/legacy.md) - -## Where can I get UNIVERSAL licenses? - -- When we cut keys for new customers who started after 2021, chances are you got only Universal keys - in the first place. -- When we cut keys for existing customers (who started before 2021) we always provided Universal - keys and sometimes provided Legacy keys. -- Therefore: You should be able to pick up your existing keys at portal.endpointpolicymanager.com. Example of - how to find existing keys: - - ![840_1_1](/images/endpointpolicymanager/troubleshooting/license/840_1_1.webp) - -- Only email [support@endpointpolicymanager.com](mailto:support@endpointpolicymanager.com) if you cannot locate your - Universal license because it should already be in the Portal at portal.endpointpolicymanager.com. - -## In the portal, after I download my license keys, how can I tell which are UNIVERSAL and which are LEGACY keys? - -- Example download of valid dates with both Universal and Legacy keys, but only Universal keys will - be honored past Feb 28, 2023: - - ![840_2_2_950x572](/images/endpointpolicymanager/troubleshooting/license/840_2_2_950x572.webp) - -## What must I do to keep PolicyPak working if I am affected?: - -- There are a few strategies you can pursue to keep Endpoint Policy Manager working as expected. -- BEST: - - Import the Universal license and make sure it hits your endpoints. If you do not have a - universal license, you may request one by opening a case at - [Netwrix support](https://www.netwrix.com/sign_in.html?rf=tickets.html#netwrix-support). - Please do not wait until the last minute to get your license as we could have many requests to - field. - - Upgrade the CSE to something recent; hopefully the latest version. -- GOOD, but not as good as BEST: - - Keep using your Legacy licenses which will  naturally expire Feb 28, 2023. - - Update the CSE to the latest version (3421 or later) on your endpoints. - - Use a Endpoint Policy Manager ADMX setting which will give you +90 days to implement the - Universal license. See screen shot below: - -![1231_licenseadmxsetting](/images/endpointpolicymanager/troubleshooting/license/1231_licenseadmxsetting.webp) - -:::note -This ADMX setting only affects CSE 3421 and later is only a stopgap measure if you -literally have no way to transition from Legacy XML to Universal XML, but you do have some way to -update your CSE. -::: - - -- Please honor the philosophy of Rings and don't "blast out" an upgrade CSE to all of your computers - at once so you can control a rollout or a rollback. Use - this guidance: [Using Rings to Test and Update the Endpoint Policy Manager Client-Side Extension and/or Cloud Client (And How to Stay Supported)](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/bestpractices/rings.md) - -## How can I install UNIVERSAL licenses once I have downloaded them? - -- First, upgrade your Admin Console MMC snap in with the latest download from the portal. Only the - latest Admin Consoles can import Universal licenses. -- Video: - [How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/installall/installuniversal.md) - - :::note -   You cannot import both Legacy and Universal licenses into the same GPO. You need - separate GPOs for both license types. If you try to put both licenses into the same GPO you will - get the error: "Sorry but you can't install GP and Enterprise licenses into the same GPO, please - install them to different GPOs or select licenses with the same type." - ::: - - -## What will happen if I do nothing?: - -- If you are using LEGACY licenses and/or very old CSEs which ONLY process LEGACY licenses (so CSEs - before 21.1.2687.802), then Endpoint Policy Manager will keep working because CSEs before - 21.1.2687.802 don't understand Universal licenses anyway. -- If you're using LEGACY licenses and NEWER CSEs (21.1.2687.802 or later), you can expect Endpoint - Policy Manager to stop processing and stop working as if your license file expired on Feb - 28, 2023. - - :::note - Exact behavior when licenses expire can be seen here: - [What happens to each component when Endpoint Policy Manager gets unlicensed or the GPO or policy no longer applies?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/components_2.md) - ::: - - -## What if I'm applying both Universal and Legacy licenses to an endpoint? - -- If a computer receives both Legacy and Universal licenses, then you should be all set, provided - you are using a CSE (build 2687 and later) on the endpoint. - - :::note - More modern CSEs on the endpoints are preferred. - ::: - - -## How can I validate on a few endpoints that I am Valid and won't expire? - -- Use the `PPUPDATE` command which will always show if you are Valid and licensing type. -- Example of a machine getting Universal licenses successfully: - - ![840_3_3_950x610](/images/endpointpolicymanager/troubleshooting/license/840_3_3_950x610.webp) - -- FAQ on error conditions: - [How can I tell how a machine is licensed (by GPO, MDM, or XML file), and also know for what components it is licensed?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/components.md). -- **NOTE:** The Latest CSE in the portal (build 3375) will also express Invalid licenses if any are - applying to the machine. Example: - - ![840_4_4_950x675](/images/endpointpolicymanager/troubleshooting/license/840_4_4_950x675.webp) - -## Anything else I should know / Bugs & Known Issues? - -Item 1: `PPupdate` may show "Computers with ‘Computer' in the name" while actually being licensed -(CSE 3375 only.) - -This bug exists only in 3375 and doesn't exist in later version of the CSE, such as 3421 and later. - -In build 3375, you might see something like this when you test `PPUPDATE`. - -![840_5_image-20230126194031-1](/images/endpointpolicymanager/troubleshooting/license/840_5_image-20230126194031-1.webp) - -:::tip -Remember, this is a display bug in 3375 which has been removed in the latest CSE version. This -message can safely be ignored. -::: - - -As long as you can see you ARE getting licensed by the Universal key method (see section above -entitled “How can I validate on a few endpoints that I am VALID and won’t expire?”) then you are -free to ignore this bug. - -Item 2: `PolicyPak` Update might show a statement which is a little misleading in CSE 3375 or -earlier. The message is updated for clarity in CSE 3421 and later. - -The message in CSE 3375 and earlier says: “The license is valid. WARNING: GP licenses will no longer -be accepted after Feb 28th, 2023.” - -Example: - -![840_6_image-20230126194031-2_950x764](/images/endpointpolicymanager/troubleshooting/license/840_6_image-20230126194031-2_950x764.webp) - -What it is trying to say is that Legacy XML licenses are not honored beyond Feb 28, 2022. - -You can still use Universal licenses via GPO and/or MDM/XML method. The updated messaging from -latest CSEs is as follows: - -![840_7_image_950x724](/images/endpointpolicymanager/troubleshooting/license/840_7_image_950x724.webp) diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/vertualizationcitrix/_category_.json b/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/vertualizationcitrix/_category_.json deleted file mode 100644 index 4ebb603bfa..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/vertualizationcitrix/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Requesting Licenses FAQ And Troubleshooting (Virtualization, Citrix, WVD, ect.)", - "position": 30, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/_category_.json b/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/_category_.json deleted file mode 100644 index 5e102a37bc..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Video Learning Center", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "videolearningcenter" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/installall/_category_.json b/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/installall/_category_.json deleted file mode 100644 index 189dc1f7f9..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/installall/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Licensing Install All Methods Universal Licenses For Customers After 2021", - "position": 20, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/installalllegacy/_category_.json b/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/installalllegacy/_category_.json deleted file mode 100644 index 9fac4ddbe5..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/installalllegacy/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Licensing Install All Methods Universal Licenses For Customers Before 2021", - "position": 30, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/requestall/_category_.json b/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/requestall/_category_.json deleted file mode 100644 index b089d3fb97..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/requestall/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Licensing Request All Methods", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/troubleshooting/_category_.json b/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/troubleshooting/_category_.json deleted file mode 100644 index 5fe641c71c..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/troubleshooting/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Troubleshooting And Un-Licensing", - "position": 40, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/videolearningcenter.md b/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/videolearningcenter.md deleted file mode 100644 index 0ac0028939..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/videolearningcenter.md +++ /dev/null @@ -1,28 +0,0 @@ ---- -title: "Video Learning Center" -description: "Video Learning Center" -sidebar_position: 20 ---- - -# Video Learning Center - -See the following Video topics for more information on Endpoint Policy Manager licensing. - -## Licensing Request: All Methods - -- [How to Request Licenses from Endpoint Policy Manager by Creating a "License Request Key"](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/requestall/licenserequestkey.md) - -## Licensing Install: All Methods (Universal Licenses for customers after 2021) - -- [How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/installall/installuniversal.md) - -## Licensing Install: All Methods (Universal Licenses for customers before 2021) - -- [Endpoint Policy Manager: Universal and Original Licensing Installation and Upgrades for Existing Customers](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/installalllegacy/upgrades.md) - -## Troubleshooting and Un-Licensing - -- [Legacy License Retirement Guidance (for Feb 28, 2023)](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/troubleshooting/legacy.md) -- [How to Un-License any Endpoint Policy ManagerComponent via ADMX or Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/troubleshooting/unlicense.md) -- [Using LT for license cleanup](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/troubleshooting/cleanup.md) -- [MDM Intune company name troubleshooting](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/troubleshooting/mdm.md) diff --git a/docs/endpointpolicymanager/knowledgebase/networksecuritymanager/_category_.json b/docs/endpointpolicymanager/knowledgebase/networksecuritymanager/_category_.json deleted file mode 100644 index c4164e6d25..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/networksecuritymanager/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Network Security Manager", - "position": 120, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/networksecuritymanager/videolearningcenter/_category_.json b/docs/endpointpolicymanager/knowledgebase/networksecuritymanager/videolearningcenter/_category_.json deleted file mode 100644 index 8a826b99da..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/networksecuritymanager/videolearningcenter/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Video Learning Center", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "videolearningcenter" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/networksecuritymanager/videolearningcenter/gettingstarted/_category_.json b/docs/endpointpolicymanager/knowledgebase/networksecuritymanager/videolearningcenter/gettingstarted/_category_.json deleted file mode 100644 index ee7419d8c4..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/networksecuritymanager/videolearningcenter/gettingstarted/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Getting Started", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/networksecuritymanager/videolearningcenter/videolearningcenter.md b/docs/endpointpolicymanager/knowledgebase/networksecuritymanager/videolearningcenter/videolearningcenter.md deleted file mode 100644 index 7d33a114ae..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/networksecuritymanager/videolearningcenter/videolearningcenter.md +++ /dev/null @@ -1,17 +0,0 @@ ---- -title: "Video Learning Center" -description: "Video Learning Center" -sidebar_position: 10 ---- - -# Video Learning Center - -See the following Video topics for Network Security Manager. - -## Getting Started - -- [Endpoint Policy Manager Network Security Manager - The Basics](/docs/endpointpolicymanager/knowledgebase/networksecuritymanager/videolearningcenter/gettingstarted/basics.md) -- [Endpoint Policy Manager Network Security Manager - Using Domain Names](/docs/endpointpolicymanager/knowledgebase/networksecuritymanager/videolearningcenter/gettingstarted/domainnames.md) -- [Endpoint Policy Manager Network Security Manager - Applications and Ports](/docs/endpointpolicymanager/knowledgebase/networksecuritymanager/videolearningcenter/gettingstarted/applicationsports.md) -- [Endpoint Policy Manager Network Security Manager - Global settings](/docs/endpointpolicymanager/knowledgebase/networksecuritymanager/videolearningcenter/gettingstarted/globalsettings.md) -- [Endpoint Policy Manager Network Security Manager - Auditing Events](/docs/endpointpolicymanager/knowledgebase/networksecuritymanager/videolearningcenter/gettingstarted/auditingevents.md) diff --git a/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/_category_.json b/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/_category_.json deleted file mode 100644 index ffa04bd601..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Remote Work Delivery Manager", - "position": 170, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/knowledgebase/_category_.json b/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/knowledgebase/_category_.json deleted file mode 100644 index 78bc685400..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/knowledgebase/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Knowledge Base", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "knowledgebase" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/knowledgebase/knowledgebase.md b/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/knowledgebase/knowledgebase.md deleted file mode 100644 index 2b7512927e..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/knowledgebase/knowledgebase.md +++ /dev/null @@ -1,21 +0,0 @@ ---- -title: "Knowledge Base" -description: "Knowledge Base" -sidebar_position: 10 ---- - -# Knowledge Base - -See the following Knowledge Base articles for Remote Work Delivery Manager. - -## Tips and Tricks - -- [How can I make applications install sequentially / in order (and how does it work?)](/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/knowledgebase/tipsandtricks/installsequentially.md) -- [How to Install UWP applications using Endpoint Policy Manager Remote Work Delivery Manager](/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/knowledgebase/tipsandtricks/installuwp.md) -- [How do I use Endpoint Policy Manager Remote Work Delivery Manager to update the Client Side Extension?](/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/knowledgebase/tipsandtricks/updateclientsideextension.md) -- [What variables can I use in place for source or destination in Remote Work Delivery Manager?](/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/knowledgebase/tipsandtricks/variables.md) -- [How To deploy a TCP/IP Printer using Endpoint Policy Manager Remote Work Delivery Manager](/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/knowledgebase/tipsandtricks/printers.md) - -## Troubleshooting - -- [My Dropbox link won't verify in Remote Work Delivery Manager](/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/knowledgebase/troubleshooting/dropboxlink.md) diff --git a/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/knowledgebase/tipsandtricks/_category_.json b/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/knowledgebase/tipsandtricks/_category_.json deleted file mode 100644 index b43a933aa8..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/knowledgebase/tipsandtricks/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Tips And Tricks", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/knowledgebase/troubleshooting/_category_.json b/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/knowledgebase/troubleshooting/_category_.json deleted file mode 100644 index d0c808bf1b..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/knowledgebase/troubleshooting/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Troubleshooting", - "position": 20, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/_category_.json b/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/_category_.json deleted file mode 100644 index 5e102a37bc..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Video Learning Center", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "videolearningcenter" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/gettingstarted/_category_.json b/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/gettingstarted/_category_.json deleted file mode 100644 index ee7419d8c4..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/gettingstarted/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Getting Started", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/methods/_category_.json b/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/methods/_category_.json deleted file mode 100644 index 40ba6417bd..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/methods/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Methods Cloud MDM SCCM Etc", - "position": 20, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/tipsandtricks/_category_.json b/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/tipsandtricks/_category_.json deleted file mode 100644 index ec873edc2f..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/tipsandtricks/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Tips And Tricks", - "position": 30, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/videolearningcenter.md b/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/videolearningcenter.md deleted file mode 100644 index 3d0ac21190..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/videolearningcenter.md +++ /dev/null @@ -1,27 +0,0 @@ ---- -title: "Video Learning Center" -description: "Video Learning Center" -sidebar_position: 20 ---- - -# Video Learning Center - -See the following Video topics for Remote Work Delivery Manager. - -## Getting Started - -- [Install software with SMB (standard share)](/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/gettingstarted/smb.md) -- [Install software using web-based shares](/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/gettingstarted/webbasedshares.md) -- [Mass copy folders and files (with filters and recursion)](/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/gettingstarted/masscopy.md) -- [Automatic Patching and Updates](/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/gettingstarted/patching.md) - -## Methods: Cloud, MDM, SCCM, etc. - -- [Deploy software with Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/methods/cloud.md) -- [Copy files and keep them up to date with your MDM service](/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/methods/mdm.md) - -## Tips and Tricks - -- [Endpoint Policy Manager: Remote Work Delivery Manager Local File Copy Magic](/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/tipsandtricks/localfilecopy.md) -- [Endpoint Policy Manager: Use Azure Blob Storage to Deploy and Patch your software](/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/tipsandtricks/azureblobstorage.md) -- [Using Remote Work Delivery Manager to Update the Endpoint Policy Manager Client Side Extension](/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/tipsandtricks/updateclientsideextension.md) diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/_category_.json b/docs/endpointpolicymanager/knowledgebase/scriptstriggers/_category_.json deleted file mode 100644 index 416ef88a13..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Scripts And Triggers Manager", - "position": 150, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/_category_.json b/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/_category_.json deleted file mode 100644 index 78bc685400..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Knowledge Base", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "knowledgebase" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/knowledgebase.md b/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/knowledgebase.md deleted file mode 100644 index 07d26c0deb..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/knowledgebase.md +++ /dev/null @@ -1,42 +0,0 @@ ---- -title: "Knowledge Base" -description: "Knowledge Base" -sidebar_position: 10 ---- - -# Knowledge Base - -See the following Knowledge Base articles for Scripts and Triggers Manager. - -## Troubleshooting - -- [What must I do in Cylance such that it will run Powershell scripts via Endpoint Policy Scripts Manager?](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/troubleshooting/cylance.md) -- [What is the expected behavior after an Endpoint Policy Manager Script "ON/APPLY" script is modified?](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/troubleshooting/onapplyscript.md) -- [Where do scripts run? How are they protected from unauthorized access? How can I change the location of where scripts are stored?](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/troubleshooting/scriptlocation.md) -- [Which VPN Solutions are currently supported for use with Scripts Manager VPN Triggers?](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/troubleshooting/vpnsolutions.md) -- [How do Endpoint Policy Scripts Manager PowerShell Scripts behave when PowerShell is blocked or disabled using the following methods?](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/troubleshooting/powershellscripts.md) -- [Why don't Batch and PowerShell scripts get blocked when SYSTEM processes are blocked](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/troubleshooting/systemprocesses.md) -- [How do I update Windows 7 machines to TLS 1.2 such that they work with Endpoint Policy Manager Cloud?](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/troubleshooting/windows7tls.md) -- [Upgrading MS Teams to latest version displays prompts for Admin Approval](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/troubleshooting/adminapproval.md) - -## Tip and Tricks - -- [How to import a WLAN / 802.11 / Wireless profile from a Network Share using Endpoint Policy Scripts Manager?](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/wlannetwork.md) -- [How to import a WLAN / 802.11 / Wireless profile from Dropbox using Endpoint Policy Scripts Manager](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/wlandropbox.md) -- [How to silently install Firefox ESR, Chrome and WinZip 14.5 using Endpoint Policy Scripts Manager](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/silentbrowserinstall.md) -- [How to create a shortcut under the Public Desktop using Endpoint Policy Scripts Manager](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/shortcutpublicdesktop.md) -- [How to deliver network drive mappings with PowerShell using Scripts Manager](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/powershell.md) -- [How do I use Scripts Manager to update the Registry on end-user workstations](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/updateregistry.md) -- [How to Reset Secure Channel for computers that have fallen out of sync with domain while working remotely by using Scripts Manager in Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/resetsecurechannel.md) -- [How-to change Temperature Unit from Fahrenheit to Celsius in Microsoft Outlook Calendar via Group Policy?](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/temperatureunit.md) -- [How do I automate BitLocker deployment for my enterprise with Group Policy and Endpoint Policy Manager?](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/bitlockerdeployment.md) -- [What is the expected behavior on Windows 10 when you MODIFY an existing Endpoint Policy Manager Scripts script?](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/windows10modifyscript.md) -- [How to run Microsoft Teams minimized to systray using PPScripts and PPAM](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/teamsminimized.md) -- [How does Endpoint Policy Manager Scripts & Triggers know when the VPN connection is made or lost?](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/vpnconnection.md) -- [How to use Scripts Manager Event Log Triggers to Map Network Drives when a VPN is Connected](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/eventlogtriggers.md) -- [How to Set the Password for a Local Account using Scripts Manager](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/localaccountpassword.md) -- [How to use Scripts Manager Triggers to Map Network Drives when a VPN is Connected](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/troubleshooting/vpn.md) -- [How do I user Endpoint Policy Manager to set the screensaver to a custom slideshow?](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/screensavers.md) -- [Can I get more details on how Endpoint Policy Scripts Manager processes run?](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/processesdetails.md) -- [How to Run Microsoft Edge Once at a User's 1st Logon using Scripts and Triggers Manager](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/edgefirstlogon.md) -- [How to Create a Local Scheduled Task to Reboot a PC every day at 9 AM](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/localscheduledtask.md) diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/_category_.json b/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/_category_.json deleted file mode 100644 index 495ac0efb4..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/tipandtricks/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Tip And Tricks", - "position": 20, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/troubleshooting/_category_.json b/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/troubleshooting/_category_.json deleted file mode 100644 index 51f22c0d00..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/knowledgebase/troubleshooting/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Troubleshooting", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/_category_.json b/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/_category_.json deleted file mode 100644 index 5e102a37bc..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Video Learning Center", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "videolearningcenter" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/gettingstarted/_category_.json b/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/gettingstarted/_category_.json deleted file mode 100644 index ee7419d8c4..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/gettingstarted/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Getting Started", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/methods/_category_.json b/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/methods/_category_.json deleted file mode 100644 index d46b7ee374..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/methods/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Methods MDM PDQ Etc", - "position": 50, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/tipsandtricks/_category_.json b/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/tipsandtricks/_category_.json deleted file mode 100644 index a6d7d9b805..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/tipsandtricks/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Tips And Tricks", - "position": 20, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/triggersexamples/_category_.json b/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/triggersexamples/_category_.json deleted file mode 100644 index 56c5cd4d47..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/triggersexamples/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Triggers Specific Examples", - "position": 40, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/videolearningcenter.md b/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/videolearningcenter.md deleted file mode 100644 index 183703fb4d..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/videolearningcenter.md +++ /dev/null @@ -1,45 +0,0 @@ ---- -title: "Video Learning Center" -description: "Video Learning Center" -sidebar_position: 20 ---- - -# Video Learning Center - -See the following Video topics for Scripts and Triggers Manager. - -## Getting Started - -- [Use with on-prem Group Policy](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/gettingstarted/onpremise.md) -- [Deploy any script via the Cloud to domain joined and non-domain joined machines](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/gettingstarted/cloud.md) - -## Tips and Tricks - -- [Endpoint Policy Manager Scripts: Automate Software deployments with PP Scripts and Chocolaty.org](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/tipsandtricks/chocolaty.md) -- [Replace the Windows 10 PRO Professional Lock screen](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/tipsandtricks/windows10prolockscreen.md) -- [Policy Scripts Manager: Set Custom Default File Associations in Windows 10](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/tipsandtricks/customdefaultfileassociations.md) -- [Removing Unwanted Windows Apps Using Endpoint Policy Manager Scripts & Triggers Manager](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/tipsandtricks/unwantedapps.md) -- [Shared Printers without Loopback: Use Endpoint Policy Manager Scripts and PowerShell to deploy and remove printers](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/tipsandtricks/printers.md) -- [Implementing BitLocker through Group Policy Using Endpoint Policy Scripts Manager and Administrative Templates Manager](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/tipsandtricks/bitlocker.md) - -## Scripts & Triggers with Cloud - -- [Endpoint Policy Manager Cloud Scripts Manager: Distribute and Import X.509 certificates](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/withcloud/x509certificates.md) -- [Endpoint Policy ManagerScripts .. Deploy Software via VPN or with Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/withcloud/cloud.md) -- [Endpoint Policy Manager Cloud TCP/IP Printer setup using Scripts Manager](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/withcloud/printersetup.md) -- [Using Endpoint Policy Manager Cloud and Auditpol.exe to enable Advanced Auditing on non-domain joined computers](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/withcloud/auditpol.md) - -## Triggers Specific Examples - -- [Endpoint Policy Manager Scripts and Triggers: Get to understand login script trigger with GP and MDM systems !](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/triggersexamples/scripttriggers.md) -- [Endpoint Policy Manager Scripts + Triggers: Map a printer or drive when a process runs and un-map it when closed.](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/triggersexamples/mapdrivetriggers.md) -- [Endpoint Policy Manager Scripts + Triggers: Perform actions at LOCK and UNLOCK of session](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/triggersexamples/lockunlocksession.md) -- [Endpoint Policy Manager Scripts + Triggers: Shutdown scripts on computer side](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/triggersexamples/shutdownscripts.md) -- [Endpoint Policy Manager Scripts & Triggers: Perform Scripts on VPN Connect and VPN Disconnect](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/triggersexamples/vpnconnect.md) -- [Endpoint Policy Manager Scripts and AnyConnect: Run a script after you connect via VPN](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/triggersexamples/anyconnect.md) -- [Endpoint Policy Manager Scripts & Triggers: Events !](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/triggersexamples/events.md) - -## Methods: MDM, PDQ, etc. - -- [Endpoint Policy Manager Scripts and YOUR MDM service: Un-real power](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/methods/mdm.md) -- [Removing Unwanted Windows Apps Using Endpoint Policy Manager and PDQ Deploy](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/methods/pdqdeploy.md) diff --git a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/withcloud/_category_.json b/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/withcloud/_category_.json deleted file mode 100644 index b6a004e65d..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/withcloud/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Scripts And Triggers With Cloud", - "position": 30, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/softwarepackage/_category_.json b/docs/endpointpolicymanager/knowledgebase/softwarepackage/_category_.json deleted file mode 100644 index 9d62c2028d..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/softwarepackage/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Software Package Manager", - "position": 190, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/softwarepackage/knowledgebase/_category_.json b/docs/endpointpolicymanager/knowledgebase/softwarepackage/knowledgebase/_category_.json deleted file mode 100644 index 78bc685400..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/softwarepackage/knowledgebase/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Knowledge Base", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "knowledgebase" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/softwarepackage/knowledgebase/gettingstarted/_category_.json b/docs/endpointpolicymanager/knowledgebase/softwarepackage/knowledgebase/gettingstarted/_category_.json deleted file mode 100644 index ee7419d8c4..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/softwarepackage/knowledgebase/gettingstarted/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Getting Started", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/softwarepackage/knowledgebase/knowledgebase.md b/docs/endpointpolicymanager/knowledgebase/softwarepackage/knowledgebase/knowledgebase.md deleted file mode 100644 index 44ff1f9b0c..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/softwarepackage/knowledgebase/knowledgebase.md +++ /dev/null @@ -1,13 +0,0 @@ ---- -title: "Knowledge Base" -description: "Knowledge Base" -sidebar_position: 10 ---- - -# Knowledge Base - -See the following Knowledge Base article for Software Package Manager. - -## Getting Started - -- [How to install WinGet on a server that you are using as a management station (unsupported)?](/docs/endpointpolicymanager/knowledgebase/softwarepackage/knowledgebase/gettingstarted/winget.md) diff --git a/docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/_category_.json b/docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/_category_.json deleted file mode 100644 index 5e102a37bc..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Video Learning Center", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "videolearningcenter" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/appxpoliciesitems/_category_.json b/docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/appxpoliciesitems/_category_.json deleted file mode 100644 index b36adba822..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/appxpoliciesitems/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "AppX Policies Items For AppX", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/tipsandtricks/_category_.json b/docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/tipsandtricks/_category_.json deleted file mode 100644 index ec873edc2f..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/tipsandtricks/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Tips And Tricks", - "position": 30, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/usingwithothermethod/_category_.json b/docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/usingwithothermethod/_category_.json deleted file mode 100644 index 07ec597e12..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/usingwithothermethod/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Using With Other METHODS Cloud MDM Etc", - "position": 40, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/videolearningcenter.md b/docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/videolearningcenter.md deleted file mode 100644 index 0b65fa36f4..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/videolearningcenter.md +++ /dev/null @@ -1,28 +0,0 @@ ---- -title: "Video Learning Center" -description: "Video Learning Center" -sidebar_position: 20 ---- - -# Video Learning Center - -See the following Video topics for Software Package Manager. - -## AppX policies Items for AppX - -- [Endpoint Policy Manager Software Package Manager: AppX Manager](/docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/appxpoliciesitems/appxmanager.md) -- [Endpoint Policy Manager: Remove built-in Windows 10 / 11 apps (including those in-the-box) included with Windows!](/docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/appxpoliciesitems/removeapps.md) -- [Endpoint Policy Manager Software Package Manager PLUS Least Privilege Manager: Block any unwanted store apps !](/docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/appxpoliciesitems/blockapps.md) - -## WinGet policies - -- [Software Package Manager + Deploying Applications via WinGet](/docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/wingetpolicies/deployapplications.md) -- [Endpoint Policy Manager and WinGet-Run](/docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/wingetpolicies/run.md) - -## Tips and Tricks - -- [Software Package Manager - Extras Tool](/docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/tipsandtricks/extrastool.md) - -## Using with other METHODS (Cloud, MDM, etc.) - -- [Endpoint Policy Package Manager (AppX Policies): Add or Remove Microsoft Store using your MDM service.](/docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/usingwithothermethod/mdm.md) diff --git a/docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/wingetpolicies/_category_.json b/docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/wingetpolicies/_category_.json deleted file mode 100644 index 042e9bfeaa..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/wingetpolicies/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "WinGet Policies", - "position": 20, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/_category_.json b/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/_category_.json deleted file mode 100644 index 5e8aa82459..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Start Screen And Task Bar Manager", - "position": 140, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/_category_.json b/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/_category_.json deleted file mode 100644 index 78bc685400..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Knowledge Base", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "knowledgebase" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/knowledgebase.md b/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/knowledgebase.md deleted file mode 100644 index 88ddb745f9..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/knowledgebase.md +++ /dev/null @@ -1,37 +0,0 @@ ---- -title: "Knowledge Base" -description: "Knowledge Base" -sidebar_position: 10 ---- - -# Knowledge Base - -See the following Knowledge Base articles for Start Screen and Task Bar Manager. - -## Troubleshooting - -- [Why aren't Taskbar manager policies working as expected on my Windows 10 machine?](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/windows10.md) -- [When does Endpoint Policy Manager Start Screen & Taskbar Manager work on Server 2019, 2016, 2012 R2?](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/windowserver.md) -- [I use Partial/Merge mode, and expected existing icons to be maintained, but instead they were wiped out. What happened?](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/existingicons.md) -- [How can I revert / rollback the Windows 10 Start Screen after I make an error (using Partial or Replace mode)?](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/rollback.md) -- [Endpoint Policy Manager Start Screen & Taskbar Manager crashes, hangs or is slow when running Group Policy update. Why?](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/crash.md) -- [Why do I see a group named ">Endpoint Policy ManagerStart Screen manager" on the left side in Endpoint Policy Manager Start Screen & Taskbar Manager ?](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/pinnedcollection.md) -- [Why do I get the error "This app can't run on your PC" ?](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/appcantrun.md) -- [Why am I seeing an Endpoint Policy Manager "advertisement" tile on my Start Screen (when I only use the TaskBar manager and NOT the Start Screen Manager?)](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/linked.md) -- [Windows default applications are not showing in Start Menu](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/windowsdefault.md) -- [Endpoint Policy Manager Task Bar Manager differences between MERGE and REPLACE modes](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/modes.md) -- [Custom icons for Endpoint Policy Manager Start Screen & Taskbar Manager aren't working as expected. What can I do?](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/customicons.md) -- [How to Disable the "How do you want to open this? Keep using this app" Notification in Windows 10](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/windows10disablenotification.md) -- [Why would it sometimes takes two logoffs and logons to see Start Screen or Taskbar changes?](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/logons.md) -- [Does Endpoint Policy Manager Start Screen Manager support pinning application icons in Windows Start Screen or Taskbar from a network location, i.e. Mapped Drives or UNC Paths?](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/mappeddrives.md) -- [Why don't I see Office 2016, Office 2019, or Office 365 icons or tiles using Start Screen Manager?](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/office365.md) - -## Tips and Tricks - -- [How do I add Explorer.exe to the taskbar using Endpoint Policy Manager Start Screen & Taskbar Manager ?](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/tipsandtricks/explorer.md) -- [How do I add the SCCM Software Center to the Start Screen or Taskbar?](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/tipsandtricks/sccmsoftwarecenter.md) -- [Can Microsoft App-V applications work with Endpoint Policy Manager Starts Screen and Taskbar Manager?](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/tipsandtricks/appv.md) -- [How do I add the Least Privilege Manager Helper tools to the Left and Right side of the Start Menu?](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/tipsandtricks/helpertools.md) -- [How-To create a folder shortcut in Windows 10 Start Menu using Endpoint Policy Manager Starts Screen Manager?](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/tipsandtricks/foldershortcut.md) -- [How can I add a link to the Control Panel to the Start Screen or Taskbar using Endpoint Policy Manager Start Screen Manager?](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/tipsandtricks/addlink.md) -- [How to automatically kill explorer at 1st Logon to Bypass needing to logout and back in for Start Screen Manager to apply](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/tipsandtricks/logonworkaround.md) diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/tipsandtricks/_category_.json b/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/tipsandtricks/_category_.json deleted file mode 100644 index a6d7d9b805..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/tipsandtricks/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Tips And Tricks", - "position": 20, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/_category_.json b/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/_category_.json deleted file mode 100644 index 51f22c0d00..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/knowledgebase/troubleshooting/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Troubleshooting", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/_category_.json b/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/_category_.json deleted file mode 100644 index 5e102a37bc..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Video Learning Center", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "videolearningcenter" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/extras/_category_.json b/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/extras/_category_.json deleted file mode 100644 index d401662532..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/extras/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Extras", - "position": 40, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/gettingstarted/_category_.json b/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/gettingstarted/_category_.json deleted file mode 100644 index ee7419d8c4..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/gettingstarted/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Getting Started", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/methods/_category_.json b/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/methods/_category_.json deleted file mode 100644 index e8e8fa6286..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/methods/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Methods SCCM XML MDM Cloud PDQ Citrix Etc", - "position": 30, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/troubleshooting/_category_.json b/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/troubleshooting/_category_.json deleted file mode 100644 index d0c808bf1b..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/troubleshooting/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Troubleshooting", - "position": 20, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/videolearningcenter.md b/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/videolearningcenter.md deleted file mode 100644 index 02128bbd5e..0000000000 --- a/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/videolearningcenter.md +++ /dev/null @@ -1,34 +0,0 @@ ---- -title: "Video Learning Center" -description: "Video Learning Center" -sidebar_position: 20 ---- - -# Video Learning Center - -See the following Video topics for Start Screen and Task Bar Manager. - -## Getting Started - -- [Endpoint Policy Manager Start Screen and Taskbar Manager Helper Utility](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/gettingstarted/helperutility.md) -- [Endpoint Policy Manager Start Screen Manager: Own the Win10 Start Menu](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/gettingstarted/windows10startmenu.md) -- [Endpoint Policy Taskbar Manager: Quick Demo](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/gettingstarted/demotaskbar.md) -- [Endpoint Policy Manager Start Screen Manager: Using Item Level Targeting](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/gettingstarted/itemleveltargeting.md) -- [Endpoint Policy Manager Start Screen Manager: Add IE links](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/gettingstarted/linksie.md) - -## Troubleshooting - -- [Endpoint Policy Manager Start Screen Manager and Special Custom Icons](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/troubleshooting/customicons.md) -- [Using PP SCRIPTS to Revert Start Menu](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/troubleshooting/revertstartmenu.md) - -## Methods: SCCM, XML, MDM, Cloud, PDQ, Citrix, etc. - -- [Endpoint Policy ManagerStart Screen & Taskbar Manager: Manage non-domain joined machines using Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/methods/nondomainjoined.md) -- [Endpoint Policy Manager Start Screen & Taskbar Manager: Manage Windows 10 Start Screen & Taskbar with your MDM service (Basics with MDM)](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/methods/mdm.md) -- [Endpoint Policy Manager Start Screen Manager: Manage Windows 10 Start Screen & Taskbar with your MDM (Advanced scenarios with ILT)](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/methods/mdmitemleveltargeting.md) -- [PP Start Screen and Taskbar manager with Citrix XenApp and XenDesktop](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/methods/citrix.md) -- [Taking Control of Your Taskbar and Start Menu with Endpoint Policy Manager and PDQ Deploy](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/methods/pdqdeploy.md) - -## Extras - -- [Endpoint Policy ManagerStart Screen and Endpoint Policy Manager Scripts: Specify exact Start Menu experience one time](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/extras/onetime.md) diff --git a/docs/endpointpolicymanager/licensing/_category_.json b/docs/endpointpolicymanager/licensing/_category_.json new file mode 100644 index 0000000000..4ee464b6ef --- /dev/null +++ b/docs/endpointpolicymanager/licensing/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "All Things Licensing", + "position": 10, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/licensing/knowledgebase/_category_.json b/docs/endpointpolicymanager/licensing/knowledgebase/_category_.json new file mode 100644 index 0000000000..d92c78eb54 --- /dev/null +++ b/docs/endpointpolicymanager/licensing/knowledgebase/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Knowledge Base", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "knowledgebase" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/_category_.json b/docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/_category_.json new file mode 100644 index 0000000000..256db08f98 --- /dev/null +++ b/docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Licensing Troubleshooting and Un-Licensing: Active Directory (GPO and SCCM)", + "position": 75, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/components_2.md b/docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/components_2.md similarity index 98% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/components_2.md rename to docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/components_2.md index 7691807986..382628ad3c 100644 --- a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/components_2.md +++ b/docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/components_2.md @@ -27,7 +27,7 @@ opt-in only from 24.4. You won't see any pop up if you're using 24.4 or later. ![29_1_2202cm3yx](/images/endpointpolicymanager/license/unlicense/29_1_2202cm3yx.webp) See -[How do I make the Grace Period licensing pop-up go away?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/graceperiod.md) +[How do I make the Grace Period licensing pop-up go away?](/docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/graceperiod.md) for additional information on Pop-Up behavior. :::note @@ -111,7 +111,7 @@ When Endpoint Policy Manager Browser Router is uninstalled or becomes unlicensed Additionally, and/or when the GPO / XML no longer applies, any Endpoint Policy Manager Browser Router "routes" are no longer honored. See -[Why doesn't Endpoint Policy Manager Browser Router routes take effect the first time I log on to Windows 8.1 or Windows 10?](/docs/endpointpolicymanager/knowledgebase/browserrouter/knowledgebase/installation/twologons.md) +[Why doesn't Endpoint Policy Manager Browser Router routes take effect the first time I log on to Windows 8.1 or Windows 10?](/docs/endpointpolicymanager/components/browserrouter/knowledgebase/installation/twologons.md) ## Endpoint Policy Manager Admin Templates Manager diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/componentscloud.md b/docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/componentscloud.md similarity index 85% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/componentscloud.md rename to docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/componentscloud.md index 0dcdb92928..15bfe706a9 100644 --- a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/componentscloud.md +++ b/docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/componentscloud.md @@ -11,12 +11,12 @@ There are three ways to unlicense an individual component. ## 1 — When using Group Policy Objects to license Endpoint Policy Manager See -[How to Un-License any Endpoint Policy ManagerComponent via ADMX or Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/troubleshooting/unlicense.md) +[How to Un-License any Endpoint Policy ManagerComponent via ADMX or Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/licensing/videolearningcenter/troubleshooting/unlicense.md) for additional information on this topic. :::note You need to first install the Endpoint Policy Manager ADMX files as seen in -[Troubleshooting with ADMX files](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/admxfiles.md). +[Troubleshooting with ADMX files](/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/admxfiles.md). ::: diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/componentsexclude.md b/docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/componentsexclude.md similarity index 96% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/componentsexclude.md rename to docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/componentsexclude.md index 841db50e03..2d94985257 100644 --- a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/componentsexclude.md +++ b/docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/componentsexclude.md @@ -9,7 +9,7 @@ sidebar_position: 50 Before you decide you wish to use this method, consider first using the ADMX method to disable specific components. The ADMX method is recommended over hand-editing the license file, and has the same effect. Therefore please consider this method first. See -[What if I want to unlicense specific components via ADMX or Endpoint Policy Manager Cloud?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/componentscloud.md) +[What if I want to unlicense specific components via ADMX or Endpoint Policy Manager Cloud?](/docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/componentscloud.md) However, if you wish to hard-unlicense a component via the license file, you may do that inside your Universal License file. @@ -77,7 +77,7 @@ Full licenses with the `` block. First, identify which component(s) you wish to unlicense. -[What CSEs are contained within Endpoint Policy Manager, what are their CSE GUIDs, and in what release did they appear?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/guids.md) +[What CSEs are contained within Endpoint Policy Manager, what are their CSE GUIDs, and in what release did they appear?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/guids.md) For instance, if you wanted to unlicense Netwrix Endpoint Policy Manager (formerly PolicyPak) Browser Router and also Endpoint Policy Manager Preferences 2.0 you would create an XML block like diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/fileold.md b/docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/fileold.md similarity index 77% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/fileold.md rename to docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/fileold.md index eacbf4c697..999215f6dc 100644 --- a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/fileold.md +++ b/docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/fileold.md @@ -18,8 +18,8 @@ You have two options: - Option 1 — One GPO per component license, the latest license you have. - Option 2 — A single GPO with the latest component licenses you have. -See [How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/installall/installuniversal.md) for +See [How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/licensing/videolearningcenter/installall/installuniversal.md) for instructions on how to install your new license. -See [Using LT for license cleanup](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/troubleshooting/cleanup.md) for additional information on how +See [Using LT for license cleanup](/docs/endpointpolicymanager/licensing/videolearningcenter/troubleshooting/cleanup.md) for additional information on how to use our LT to help you do a Deep search for licenses and help you automatically clean up diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/forceddisabled.md b/docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/forceddisabled.md similarity index 92% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/forceddisabled.md rename to docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/forceddisabled.md index a3a4f0ddce..cb012952ed 100644 --- a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/forceddisabled.md +++ b/docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/forceddisabled.md @@ -31,15 +31,15 @@ But when the machine is domain joined and GPPreferences policies are being deliv Policy, the Endpoint Policy Manager Preferences component can cause an issue because of timing outside of our control between the Group Policy / GPPreferences engine and Endpoint Policy Manager. This has been a known issue for years. You can -see[Why do I see slowdowns on my machines when Endpoint Policy Manager Preferences is licensed and computers domain joined? Can this be worked around?](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicypreferences/domainjoined.md) +see [Why do I see slowdowns on my machines when Endpoint Policy Manager Preferences is licensed and computers domain joined? Can this be worked around?](/docs/endpointpolicymanager/components/admintemplatesmanager/knowledgebase/exportinggrouppolicypreferences/domainjoined.md) In order to minimize conflicts, we have, in the past, suggested that customers un-license Endpoint Policy Manager Preferences when the machine is domain joined. See -[How to Un-License any Endpoint Policy ManagerComponent via ADMX or Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/troubleshooting/unlicense.md) +[How to Un-License any Endpoint Policy ManagerComponent via ADMX or Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/licensing/videolearningcenter/troubleshooting/unlicense.md) for additional information. There is also a video you can watch on -[Troubleshooting with ADMX files](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/admxfiles.md) +[Troubleshooting with ADMX files](/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/admxfiles.md) More recently, Universal licenses are delivered with Endpoint Policy Manager Preferences disabled (for customers which have domain joined machines), and you need to specifically enable it. In this @@ -59,7 +59,7 @@ Customers must change this value if they wish to enable this component (which th explained later.) See -[How do I specifically exclude or prevent a component from performing processing by modifying the license file?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/componentsexclude.md) +[How do I specifically exclude or prevent a component from performing processing by modifying the license file?](/docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/componentsexclude.md) In logs, CSE shows a message: diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/options.md b/docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/options.md similarity index 95% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/options.md rename to docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/options.md index f899ef2e05..fa651a0997 100644 --- a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/options.md +++ b/docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/options.md @@ -9,7 +9,7 @@ sidebar_position: 20 Before reading the full answer to this question, please go over this FAQ question and see if that answers your question: -[Why do I have to run the licensing tool / what information is gathered and sent to Endpoint Policy Manager for my trial (or becoming a customer?)](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingall/tool.md) +[Why do I have to run the licensing tool / what information is gathered and sent to Endpoint Policy Manager for my trial (or becoming a customer?)](/docs/endpointpolicymanager/licensing/knowledgebase/requestingall/tool.md) In short, we don't collect any critical information at all. The LT only collects the number of computers and where the licenses are used. Because of this, we recommend you use the LT utility as @@ -76,7 +76,7 @@ So, to recap: **Step 1 –** If you use our Endpoint Policy Manager On-Prem Licensing tool (LT), we collect only information about where you want to use it and how much you want to use it. We do not collect usernames, computer names, passwords or anything else. Again, see -[Why do I have to run the licensing tool / what information is gathered and sent to Endpoint Policy Manager for my trial (or becoming a customer?)](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingall/tool.md)for additional +[Why do I have to run the licensing tool / what information is gathered and sent to Endpoint Policy Manager for my trial (or becoming a customer?)](/docs/endpointpolicymanager/licensing/knowledgebase/requestingall/tool.md)for additional information **Step 2 –** If you are unable to use our LT, that's fine. The alternative is to use these diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/reset.md b/docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/reset.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/reset.md rename to docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/reset.md diff --git a/docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/_category_.json b/docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/_category_.json new file mode 100644 index 0000000000..0f65ce0fde --- /dev/null +++ b/docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Licenses FAQ For Active Directory GPO And SCCM", + "position": 10, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/disabledcomputer.md b/docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/disabledcomputer.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/disabledcomputer.md rename to docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/disabledcomputer.md diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/domain.md b/docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/domain.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/domain.md rename to docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/domain.md diff --git a/docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/domainmultiple.md b/docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/domainmultiple.md new file mode 100644 index 0000000000..148ba579cb --- /dev/null +++ b/docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/domainmultiple.md @@ -0,0 +1,19 @@ +--- +title: "I have multiple domains. How is that licensed?" +description: "I have multiple domains. How is that licensed?" +sidebar_position: 70 +--- + +# I have multiple domains. How is that licensed? + +Here is the general process: + +- You run the Licensing Tool once per domain and perform your count. +- Then, you add those numbers together. +- You then send us your License Request Keys (one for each domain). +- You pay for the computers you want to license per domain. + +We then create licensing keys, one for each domain. + +See +[How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/licensing/videolearningcenter/installall/installuniversal.md) diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/domainou.md b/docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/domainou.md similarity index 91% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/domainou.md rename to docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/domainou.md index 4a1b4cf855..13f7817ae7 100644 --- a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/domainou.md +++ b/docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/domainou.md @@ -18,7 +18,7 @@ You don not need approval of domain or enterprise admins; you can get started ri :::note See -[Using Shares to Store Your Paks (Share-Based Storage)](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/shares.md) +[Using Shares to Store Your Paks (Share-Based Storage)](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/shares.md) how PP Application Manager Paks can be stored in a share. ::: diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/enforced.md b/docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/enforced.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/enforced.md rename to docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/enforced.md diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/gpoedit.md b/docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/gpoedit.md similarity index 81% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/gpoedit.md rename to docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/gpoedit.md index dfabf289c9..dab562f00e 100644 --- a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/gpoedit.md +++ b/docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/gpoedit.md @@ -11,7 +11,7 @@ Yes. And here is why. First, you will need to import Netwrix Endpoint Policy Manager (formerly PolicyPak) licensing files. After a GPO is created (not by you), and you edit it, see -[The License Tool (LT) isn't permitting me to install License Files (or I am using AGPM, GPA, or GPOAdmin.) What should I try?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/wizard.md) +[The License Tool (LT) isn't permitting me to install License Files (or I am using AGPM, GPA, or GPOAdmin.) What should I try?](/docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/wizard.md) for additional information. You will import the license files while editing the GPO. Next, all normal operations in Endpoint Policy Manager are available to you, like Endpoint Policy @@ -24,5 +24,5 @@ controllers. ::: -See[Using Shares to Store Your Paks (Share-Based Storage)](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/shares.md) +See [Using Shares to Store Your Paks (Share-Based Storage)](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/shares.md) for additional information on using shares with Endpoint Policy Manager Admin Templates Manager. diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/ou.md b/docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/ou.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/ou.md rename to docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/ou.md diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/ousub.md b/docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/ousub.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/ousub.md rename to docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/ousub.md diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/scope.md b/docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/scope.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/scope.md rename to docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/scope.md diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/server.md b/docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/server.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/server.md rename to docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/server.md diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/users.md b/docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/users.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/users.md rename to docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/users.md diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/wizard.md b/docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/wizard.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqactivedirectory/wizard.md rename to docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/wizard.md diff --git a/docs/endpointpolicymanager/licensing/knowledgebase/faqcloud/_category_.json b/docs/endpointpolicymanager/licensing/knowledgebase/faqcloud/_category_.json new file mode 100644 index 0000000000..e1fd0150a1 --- /dev/null +++ b/docs/endpointpolicymanager/licensing/knowledgebase/faqcloud/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Licensing FAQ And Troubleshooting Endpoint Policy Manager Cloud", + "position": 20, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqcloud/billing.md b/docs/endpointpolicymanager/licensing/knowledgebase/faqcloud/billing.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqcloud/billing.md rename to docs/endpointpolicymanager/licensing/knowledgebase/faqcloud/billing.md diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqcloud/licensestatus.md b/docs/endpointpolicymanager/licensing/knowledgebase/faqcloud/licensestatus.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqcloud/licensestatus.md rename to docs/endpointpolicymanager/licensing/knowledgebase/faqcloud/licensestatus.md diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqcloud/notifications.md b/docs/endpointpolicymanager/licensing/knowledgebase/faqcloud/notifications.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqcloud/notifications.md rename to docs/endpointpolicymanager/licensing/knowledgebase/faqcloud/notifications.md diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqcloud/onpremise.md b/docs/endpointpolicymanager/licensing/knowledgebase/faqcloud/onpremise.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqcloud/onpremise.md rename to docs/endpointpolicymanager/licensing/knowledgebase/faqcloud/onpremise.md diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqcloud/reclaimed.md b/docs/endpointpolicymanager/licensing/knowledgebase/faqcloud/reclaimed.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/faqcloud/reclaimed.md rename to docs/endpointpolicymanager/licensing/knowledgebase/faqcloud/reclaimed.md diff --git a/docs/endpointpolicymanager/licensing/knowledgebase/installing/_category_.json b/docs/endpointpolicymanager/licensing/knowledgebase/installing/_category_.json new file mode 100644 index 0000000000..636e108450 --- /dev/null +++ b/docs/endpointpolicymanager/licensing/knowledgebase/installing/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Installing Licenses All Methods", + "position": 60, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/installing/filemultiple.md b/docs/endpointpolicymanager/licensing/knowledgebase/installing/filemultiple.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/installing/filemultiple.md rename to docs/endpointpolicymanager/licensing/knowledgebase/installing/filemultiple.md diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/installing/universal.md b/docs/endpointpolicymanager/licensing/knowledgebase/installing/universal.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/installing/universal.md rename to docs/endpointpolicymanager/licensing/knowledgebase/installing/universal.md diff --git a/docs/endpointpolicymanager/licensing/knowledgebase/knowledgebase.md b/docs/endpointpolicymanager/licensing/knowledgebase/knowledgebase.md new file mode 100644 index 0000000000..78639dc8d0 --- /dev/null +++ b/docs/endpointpolicymanager/licensing/knowledgebase/knowledgebase.md @@ -0,0 +1,93 @@ +--- +title: "Knowledge Base" +description: "Knowledge Base" +sidebar_position: 10 +--- + +# Knowledge Base + +See the following Knowledge Base articles for information regarding Endpoint Policy Manager +licensing. + +## Licenses FAQ for Active Directory (GPO and SCCM) + +- [Will I need a license server to manage my Endpoint Policy Manager licenses?](/docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/server.md) +- [What if we license one OU, say, Sales Computers OU, then during the year we also want to license a peer OU, like Marketing Computers OU?](/docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/ou.md) +- [We purchased our Endpoint Policy Manager license for a parent OU in our Active Directory structure. What happens if we need to add additional sub-OUs inside of the parent one? How will this affect our licensing?](/docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/ousub.md) +- [We purchased our Endpoint Policy Manager license for a parent OU in our Active Directory structure. What happens if we need to add additional sub-OUs inside of the parent one? How will this affect our licensing?](/docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/ousub.md) +- [I'm an OU admin and not a domain administrator. Can I use Endpoint Policy Manager in my OU and not the whole domain?](/docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/domainou.md) +- [I can only EDIT GPOs and not create them. Can I still use Endpoint Policy Manager?](/docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/gpoedit.md) +- [I want to license the whole domain (or main OU), but I don't want to pay for every computer in that domain (or main OU)](/docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/domain.md) +- [I have multiple domains. How is that licensed?](/docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/domainmultiple.md) +- [Why does License Tool ask Who am I and Where do I want to use Endpoint Policy Manager?](/docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/scope.md) +- [Does the Licensing Tool (LT.exe) count disabled Active Directory computer accounts ?](/docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/disabledcomputer.md) +- [Does LT count users?](/docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/users.md) +- [The License Tool (LT) isn't permitting me to install License Files (or I am using AGPM, GPA, or GPOAdmin.) What should I try?](/docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/wizard.md) +- [Licence Tool recommends I enforce the links on the licensing GPOs. Should I do this, and why is this recommended?](/docs/endpointpolicymanager/licensing/knowledgebase/faqactivedirectory/enforced.md) + +## Licensing FAQ and Troubleshooting: Endpoint Policy Manager Cloud + +- [How do I license machines to work on-premise if I'm an Endpoint Policy Manager Cloud Customer?](/docs/endpointpolicymanager/licensing/knowledgebase/faqcloud/onpremise.md) +- [How do I stop getting emails which say : "You have less than X% of your Endpoint Policy Manager licenses available for your company"](/docs/endpointpolicymanager/licensing/knowledgebase/faqcloud/notifications.md) +- [How do I understand my cloud licenses?](/docs/endpointpolicymanager/licensing/knowledgebase/faqcloud/licensestatus.md) +- [How exactly does monthly billing work with Endpoint Policy Manager SaaS Edition?](/docs/endpointpolicymanager/licensing/knowledgebase/faqcloud/billing.md) +- [ What happens if PPCloud computers are offline for more than 7 days?](/docs/endpointpolicymanager/licensing/knowledgebase/faqcloud/reclaimed.md) + +## Requesting Licenses FAQ and Troubleshooting (all Methods) + +- [What is the fastest way to get started in an Endpoint Policy Manager trial, without running the License Request Tool?](/docs/endpointpolicymanager/licensing/knowledgebase/requestingall/trial.md) +- [Why do I have to run the licensing tool / what information is gathered and sent to Endpoint Policy Manager for my trial (or becoming a customer?)](/docs/endpointpolicymanager/licensing/knowledgebase/requestingall/tool.md) +- [What Logs do I need to send for troubleshooting LT (License Tool) or other MMC / .Net related functions?](/docs/endpointpolicymanager/licensing/knowledgebase/requestingall/logs.md) +- [How do I manually count the number of computers in Intune, and manually acquire the Intune "Company Name?"](/docs/endpointpolicymanager/licensing/knowledgebase/requestingall/intune.md) +- [What are the most common questions about editing policies using the Endpoint Policy ManagerCloud policy editor (instead of using the MMC to upload to Endpoint Policy Manager Cloud?)](/docs/endpointpolicymanager/deliverymethods/cloud/knowledgebase/clienttips/edit.md) + +## Requesting Licenses FAQ and Troubleshooting (Virtualization, Citrix, WVD, etc.) + +- [How are Terminal Services and/or Citrix connections licensed?](/docs/endpointpolicymanager/licensing/knowledgebase/vertualizationcitrix/terminalservices.md) +- [How do I license my Citrix, RDS, WVD, VDI or other multi-session Windows version with Endpoint Policy Manager Cloud ?](/docs/endpointpolicymanager/licensing/knowledgebase/vertualizationcitrix/multisession.md) +- [Why must I run LT from a Windows Server if I want to properly count Citrix / Terminal Services / RDS connections?](/docs/endpointpolicymanager/licensing/knowledgebase/vertualizationcitrix/tool_1.md) +- [What must I show to prove my current RDS and/or Citrix, or other Multi-Session windows concurrent license count for Endpoint Policy Manager Cloud (or if on-prem LT cannot auto-discover them)?](/docs/endpointpolicymanager/licensing/knowledgebase/vertualizationcitrix/count.md) +- [Are there any special Endpoint Policy Manager licensing issues for virtual desktops?](/docs/endpointpolicymanager/licensing/knowledgebase/vertualizationcitrix/desktops.md) + +## Licensing: Requesting Licenses: MDM + +- [When licensing Endpoint Policy Managerwith an MDM provider, what do I need to send in to Endpoint Policy Manager? ](/docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/setup.md) +- [If I have both Azure joined and Hybrid Azure AD joined machines, how do I count the exact number of licenses I need?](/docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/entraid.md) +- [What if I have multiple domain names within the MDM I want to license?](/docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/domainmultiple.md) +- [How do I license Endpoint Policy Manager if I use Azure / Azure Active Directory / Azure Active Directory Domain Services / AD Domain Controllers in Azure?](/docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/hybrid.md) +- [How are BYOD "Workplace Joined" (aka Intune Registered) counted toward licensing?](/docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/jointype.md) +- [I'm having trouble running the Licensing Tool (LT) and counting computers with Intune. What troubleshooting information can I send Endpoint Policy Manager support?](/docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/tool.md) +- [What is the difference if I license my MDM machines' CSE using COMPANY NAME vs. UPN name?](/docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/name.md) +- [Why does the Endpoint Policy Manager Licensing Tool (LT.EXE) require admin rights to query for Intune / Azure data?](/docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/adminrights.md) + +## Licensing: Installing Licenses: All Methods + +- [What is the best way to roll out New Universal licenses if I already have Original licenses?](/docs/endpointpolicymanager/licensing/knowledgebase/installing/universal.md) +- [I received multiple license files back from the Sales team (one for each Endpoint Policy Manager component.) Should I install all of them?](/docs/endpointpolicymanager/licensing/knowledgebase/installing/filemultiple.md) + +## Licensing Troubleshooting: All Methods + +- [How can I tell how a machine is licensed (by GPO, MDM, or XML file), and also know for what components it is licensed?](/docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/components.md) +- [I have a pop-up saying "License expires soon" or "Licenses expire in X days" when editing a GPO. What do I do?](/docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/expires.md) +- [How do I turn on MMC Snap in Logs (for troubleshooting MMC Editing or Licensing Import)?](/docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/mmcsnapinlogs.md) +- [I unlicensed my machine by removing a universal license, my machine still appears licensed. Why is this?](/docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/universal.md) +- [Action Required for Endpoint Policy Manager Customers using Legacy Licenses](/docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/legacy.md) +- [How do I make the Grace Period licensing pop-up go away?](/docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/graceperiod.md) +- [Action Recommended Endpoint Policy Manager Customers to transition from "Enterprise" Licenses to "Enterprise Full" licenses.](/docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/enterprisefull.md) +- [Gathering License Tool logs (LT.exe)](/docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/toollogs.md) + +## Licensing Troubleshooting and Un-Licensing: Active Directory (GPO and SCCM) + +- [What happens to each component when Endpoint Policy Manager gets unlicensed or the GPO or policy no longer applies?](/docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/components_2.md) +- [My organization doesn't permit me to run the LT (Endpoint Policy Manager Licensing Tool) or provide the XML information it produces. What are my other options?](/docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/options.md) +- [What if I want to unlicense specific components via ADMX or Endpoint Policy Manager Cloud?](/docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/componentscloud.md) +- [I just installed new license files / new GPOs. Should I keep or delete the old license files / GPOs?](/docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/fileold.md) +- [How do I specifically exclude or prevent a component from performing processing by modifying the license file?](/docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/componentsexclude.md) +- [How can I verify, test and/or reset my Domain Join (aka SecureChannel) from the endpoint to domain controller?](/docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/reset.md) +- [Why is Endpoint Policy Manager Preferences (original version) "forced disabled" by default?](/docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/forceddisabled.md) + +## Misc Licensing Questions + +- [When and why would I license Endpoint Policy Manager on servers?](/docs/endpointpolicymanager/licensing/knowledgebase/miscquestions/whenwhy.md) +- [What items and components are licensed, and what components are free?](/docs/endpointpolicymanager/licensing/knowledgebase/miscquestions/components_1.md) +- [Why must I transition from Legacy to Universal licenses (and what are the differences?)](/docs/endpointpolicymanager/licensing/knowledgebase/miscquestions/transition.md) diff --git a/docs/endpointpolicymanager/licensing/knowledgebase/miscquestions/_category_.json b/docs/endpointpolicymanager/licensing/knowledgebase/miscquestions/_category_.json new file mode 100644 index 0000000000..767bd049e2 --- /dev/null +++ b/docs/endpointpolicymanager/licensing/knowledgebase/miscquestions/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Misc Licensing Questions", + "position": 90, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/miscquestions/components_1.md b/docs/endpointpolicymanager/licensing/knowledgebase/miscquestions/components_1.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/miscquestions/components_1.md rename to docs/endpointpolicymanager/licensing/knowledgebase/miscquestions/components_1.md diff --git a/docs/endpointpolicymanager/licensing/knowledgebase/miscquestions/transition.md b/docs/endpointpolicymanager/licensing/knowledgebase/miscquestions/transition.md new file mode 100644 index 0000000000..077b6254e2 --- /dev/null +++ b/docs/endpointpolicymanager/licensing/knowledgebase/miscquestions/transition.md @@ -0,0 +1,71 @@ +--- +title: "Why must I transition from Legacy to Universal licenses (and what are the differences?)" +description: "Why must I transition from Legacy to Universal licenses (and what are the differences?)" +sidebar_position: 30 +--- + +# Why must I transition from Legacy to Universal licenses (and what are the differences?) + +Starting in January 2021, Netwrix Endpoint Policy Manager (formerly PolicyPak) transitioned the +licensing model from Legacy to Universal licenses. +In 2022, the Endpoint Policy Manager CSE (any version) stopped honoring legacy licenses +Additionally, to take advantage of some features, like Capabilities (explained below) you must have +the latest CSEs and a Universal license. + +## Understanding Legacy Licenses + +Legacy licenses take the form of multiple keys, one for each component. + +Whenever we have a new component, we would issue your company a new legacy license for that +component. + +![861_1_hfkb-1130-img-01](/images/endpointpolicymanager/license/861_1_hfkb-1130-img-01.webp) + +An individual legacy license XML looks like this and contains the product (component) and the scope +of where it is licensed to: + +![861_2_hfkb-1130-img-02_950x238](/images/endpointpolicymanager/license/861_2_hfkb-1130-img-02_950x238.webp) + +You then use the Group Policy editor to consume the license and the result would look something like +this. + +![861_3_hfkb-1130-img-03_950x447](/images/endpointpolicymanager/license/861_3_hfkb-1130-img-03_950x447.webp) + +Additionally, if you wanted to use Endpoint Policy Manager with an MDM service, we needed to cut a +second set of keys just for that scenario. That second set of licenses is an .MSI which also contain +the XMLs which enable Endpoint Policy Manager to work with an MDM service. + +Tip: You can use 7zip to open an MSI and see the licenses, like this.: + +![861_4_hfkb-1130-img-04_950x320](/images/endpointpolicymanager/license/861_4_hfkb-1130-img-04_950x320.webp) + +## Understanding Universal Licenses + +Universal licenses solve a lot of problems around key generation: + +- Instead of having one set for Active Directory (GPO / SCCM or other on-prem and another for MDM, + we can generate one key which can be used in both places. +- Administrators may select which types of policies are honored (Group Policy-based, XML-files + based, or coming from MDM). +- All components purchased can be in one XML file +- Some components which have capabilities may be specified with those capabilities. This is not + available in Legacy license type. +- For MDM customers, we can specify EITHER Intune Company name or UPN name. + [What is the difference if I license my MDM machines' CSE using COMPANY NAME vs. UPN name?](/docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/name.md) + This is not available for Legacy license type. +- Administrators may disable a specifically licensed component, without having to request Endpoint + Policy Manager support to re-cut the license. + [How do I specifically exclude or prevent a component from performing processing by modifying the license file?](/docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/componentsexclude.md) +- The license may be wrapped up by the admin as a .MSI and re-deployed without contacting Endpoint + Policy Manager support to make a .MSI. + [How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/licensing/videolearningcenter/installall/installuniversal.md) + +![861_5_hfkb-1130-img-05_950x431](/images/endpointpolicymanager/license/861_5_hfkb-1130-img-05_950x431.webp) + +In the Group Policy editor you can consume the Universal license and it will look like this. + +![861_6_hfkb-1130-img-06_950x670](/images/endpointpolicymanager/license/861_6_hfkb-1130-img-06_950x670.webp) + +And finally using` PPUPDATE` command on the endpoint, you can see how you are licensed : + +![861_7_hfkb-1130-img-07_950x984](/images/endpointpolicymanager/license/861_7_hfkb-1130-img-07_950x984.webp) diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/miscquestions/whenwhy.md b/docs/endpointpolicymanager/licensing/knowledgebase/miscquestions/whenwhy.md similarity index 75% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/miscquestions/whenwhy.md rename to docs/endpointpolicymanager/licensing/knowledgebase/miscquestions/whenwhy.md index c8c9eaf3f8..e68d51630a 100644 --- a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/miscquestions/whenwhy.md +++ b/docs/endpointpolicymanager/licensing/knowledgebase/miscquestions/whenwhy.md @@ -14,7 +14,7 @@ two FAQs for details: - General Citrix & Multi-Session Windows Licensing: [Citrix & WVD Multi-session Windows Licensing Scenarios](https://www.endpointpolicymanager.com/purchasing/citrix-licensing-scenarios.html) - For Citrix + Cloud: - [How do I license my Citrix, RDS, WVD, VDI or other multi-session Windows version with Endpoint Policy Manager Cloud ?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/vertualizationcitrix/multisession.md) + [How do I license my Citrix, RDS, WVD, VDI or other multi-session Windows version with Endpoint Policy Manager Cloud ?](/docs/endpointpolicymanager/licensing/knowledgebase/vertualizationcitrix/multisession.md) That being said, you might want to license your normal, everyday servers for a variety of reasons. Here are some examples: @@ -25,32 +25,32 @@ Here are some examples: down to one. See this blog for details: [https://www.endpointpolicymanager.com/pp-blog/windows-update-business](https://www.endpointpolicymanager.com/pp-blog/windows-update-business). Then, here's the video on how to perform reduction of existing GPOs: - [Reduce GPOs (and/or export them for use with Endpoint Policy Manager Cloud or with MDM)](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/admintemplatesmethods/reducegpos.md) + [Reduce GPOs (and/or export them for use with Endpoint Policy Manager Cloud or with MDM)](/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/admintemplatesmethods/reducegpos.md) 2. You can use Endpoint Policy Manager Admin Templates Manager to specify and lockdown settings for browsers and other applications when an admin logs on. Quick examples: - [What is Endpoint Policy Application Manager (Group Policy Edition)](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/whatdoesitdo/grouppolicy.md) + [What is Endpoint Policy Application Manager (Group Policy Edition)](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/whatdoesitdo/grouppolicy.md) and - [Manage Internet Explorer Settings With Endpoint Policy Manager Application Settings Manager](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/internetexplorer/settings.md) + [Manage Internet Explorer Settings With Endpoint Policy Manager Application Settings Manager](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/internetexplorer/settings.md) 3. You can use Endpoint Policy Manager Least Privilege Manager to block items that admins shouldn't run. Example of blocking - applications: [Endpoint Policy Manager Application Control with PP Least Privilege Manager](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/applicationcontrol.md) + applications: [Endpoint Policy Manager Application Control with PP Least Privilege Manager](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/basicsandgettingstarted/applicationcontrol.md) 4. You can use Endpoint Policy Manager Least Privilege Manager to reduce service account rights: - [Reduce or specify Service Account Rights](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/serviceaccountrights.md) + [Reduce or specify Service Account Rights](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/serviceaccountrights.md) 5. You can use Endpoint Policy Manager Least Privilege Manager to block PowerShell except for where absolutely needed: - [Block PowerShell in General, Open up for specific items](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/powershellblock.md) + [Block PowerShell in General, Open up for specific items](/docs/endpointpolicymanager/components/endpointprivilegemanager/videolearningcenter/bestpractices/powershellblock.md) 6. You can use Endpoint Policy Manager Least Privilege Manager to reduce the admin rights on specific processes or applications, like IE and - others:[Can I use Endpoint Privilege Manager to LOWER / remove admin rights from Administrators from an application or process, like Internet Explorer?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsforadminapproval/reduceadminrights.md) + others:[Can I use Endpoint Privilege Manager to LOWER / remove admin rights from Administrators from an application or process, like Internet Explorer?](/docs/endpointpolicymanager/components/endpointprivilegemanager/knowledgebase/tipsforadminapproval/reduceadminrights.md) 7. You can use Endpoint Policy Manager Scripts Manager to perform specific logon scripts for specific servers using Triggers: - [Endpoint Policy Manager Scripts and Triggers: Get to understand login script trigger with GP and MDM systems !](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/triggersexamples/scripttriggers.md) + [Endpoint Policy Manager Scripts and Triggers: Get to understand login script trigger with GP and MDM systems !](/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/triggersexamples/scripttriggers.md) 8. You can use Endpoint Policy Manager Scripts Manager to perform specific scripts like mapping a drive, or running another process when a parent process is launched: - [Endpoint Policy Manager Scripts + Triggers: Map a printer or drive when a process runs and un-map it when closed.](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/triggersexamples/mapdrivetriggers.md) + [Endpoint Policy Manager Scripts + Triggers: Map a printer or drive when a process runs and un-map it when closed.](/docs/endpointpolicymanager/components/scriptstriggers/videolearningcenter/triggersexamples/mapdrivetriggers.md) 9. You can use Endpoint Policy Manager Admin Templates Manager and remove Loopback and specify specific user side settings for specific machines when any user (admin or otherwise) logs on to the machine: - [Endpoint Policy Manager Admin Templates Manager: Switched Policies (without Loopback)](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/admintemplatesmanager/switchedpolicies.md) + [Endpoint Policy Manager Admin Templates Manager: Switched Policies (without Loopback)](/docs/endpointpolicymanager/components/admintemplatesmanager/videolearningcenter/admintemplatesmanager/switchedpolicies.md) There are other uses, but those are the ones that most customers use. diff --git a/docs/endpointpolicymanager/licensing/knowledgebase/requestingall/_category_.json b/docs/endpointpolicymanager/licensing/knowledgebase/requestingall/_category_.json new file mode 100644 index 0000000000..3fcf15c782 --- /dev/null +++ b/docs/endpointpolicymanager/licensing/knowledgebase/requestingall/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Requesting Licenses FAQ And Troubleshooting All Methods", + "position": 30, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingall/editpolicies.md b/docs/endpointpolicymanager/licensing/knowledgebase/requestingall/editpolicies.md similarity index 93% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingall/editpolicies.md rename to docs/endpointpolicymanager/licensing/knowledgebase/requestingall/editpolicies.md index 1f3fa08f0c..4d9ca5cff6 100644 --- a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingall/editpolicies.md +++ b/docs/endpointpolicymanager/licensing/knowledgebase/requestingall/editpolicies.md @@ -27,7 +27,7 @@ you automatically. Q: How is this kept up to date? A: We do it for you. For Windows, Office and Endpoint Policy Manager ADMX settings. See -[Endpoint Policy ManagerCloud: Use in-cloud ADMX settings maintained by Endpoint Policy Manager for Windows, Office, Chrome and more](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/admxsettings.md) +[Endpoint Policy ManagerCloud: Use in-cloud ADMX settings maintained by Endpoint Policy Manager for Windows, Office, Chrome and more](/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/admxsettings.md) Q: Do you have Windows 10 and 11 settings in Endpoint Policy Manager Cloud? A: Yes. See @@ -36,7 +36,7 @@ for additional information. Q: What about Custom ADMX, like Acrobat and Chrome? Can I upload those myself? A: Yes. See -[Endpoint Policy ManagerCloud: Upload and use your own ADMX files to Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/admxfiles.md) +[Endpoint Policy ManagerCloud: Upload and use your own ADMX files to Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/admxfiles.md) Q: Why don't you have editors for all the other types: GPPrefs, Security, and Endpoint Policy Manager Settings? diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingall/intune.md b/docs/endpointpolicymanager/licensing/knowledgebase/requestingall/intune.md similarity index 91% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingall/intune.md rename to docs/endpointpolicymanager/licensing/knowledgebase/requestingall/intune.md index eaea330789..413ce31b0f 100644 --- a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingall/intune.md +++ b/docs/endpointpolicymanager/licensing/knowledgebase/requestingall/intune.md @@ -17,7 +17,7 @@ the same result. Please follow the steps in the following article to acquire the number of Computers in Intune. Please send us screenshots like the ones in the article to let us know the number of machines. -[If I have both Azure joined and Hybrid Azure AD joined machines, how do I count the exact number of licenses I need?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/entraid.md) +[If I have both Azure joined and Hybrid Azure AD joined machines, how do I count the exact number of licenses I need?](/docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/entraid.md) ## Part 2: Getting the Intune Company Name @@ -31,7 +31,7 @@ Connect-MSGraph -AdminConsent Get-Organization | Select @{N = 'CompanyName'; E = { $_.displayName } } | out-file INTUNECOMPANYNAME.TXT ``` -See [MDM Intune company name troubleshooting](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/troubleshooting/mdm.md) +See [MDM Intune company name troubleshooting](/docs/endpointpolicymanager/licensing/videolearningcenter/troubleshooting/mdm.md) ## Final Thoughts: Number of computers + Company Name diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingall/logs.md b/docs/endpointpolicymanager/licensing/knowledgebase/requestingall/logs.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingall/logs.md rename to docs/endpointpolicymanager/licensing/knowledgebase/requestingall/logs.md diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingall/tool.md b/docs/endpointpolicymanager/licensing/knowledgebase/requestingall/tool.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingall/tool.md rename to docs/endpointpolicymanager/licensing/knowledgebase/requestingall/tool.md diff --git a/docs/endpointpolicymanager/licensing/knowledgebase/requestingall/trial.md b/docs/endpointpolicymanager/licensing/knowledgebase/requestingall/trial.md new file mode 100644 index 0000000000..2faec8b492 --- /dev/null +++ b/docs/endpointpolicymanager/licensing/knowledgebase/requestingall/trial.md @@ -0,0 +1,143 @@ +--- +title: "What is the fastest way to get started in an Endpoint Policy Manager trial, without running the License Request Tool?" +description: "What is the fastest way to get started in an Endpoint Policy Manager trial, without running the License Request Tool?" +sidebar_position: 10 +--- + +# What is the fastest way to get started in an Endpoint Policy Manager trial, without running the License Request Tool? + +We know you want to get started with a Netwrix Endpoint Policy Manager (formerly PolicyPak) trial +fast. + +Good news, we only need a few pieces of information to get started. Typically we can get started +with only: + +- Your domain name (for GPO/AD Method) +- Your Intune company name (for Intune method) +- Or, nothing at all, which works for all methods:Just rename a computer. + +:::warning +The details in this article get you started without having to count the number of +computers, which means we cannot get you a formal quote. Only when you count the computers are we +able to provide you a formal quote. This process is slower and optional, but does mean we can get +you a formal quote. +See [How to Request Licenses from Endpoint Policy Manager by Creating a "License Request Key"](/docs/endpointpolicymanager/licensing/videolearningcenter/requestall/licenserequestkey.md) +for additional information. Then send your License Request Key XML to your sales person to get a +formal quote generated. +::: + + +So, here's the rundown of how you can get a trial license quickly.. You need to pick just one: + +- Option 1 — On-Prem or MDM: No license at all, by renaming a computer to have Computer in the + name(recommended). +- Option 2 — Licenses coming automatically from Endpoint Policy Manager Cloud. +- Option 3 — On-Prem / GPO Method: You give us your domain name, we give you back a Trial License + File. +- Option 4 — Intune-specific method: You give us your INTUNE company name,, and we give you back a + Trial License File. +- Option 5 — Non-Intune/Other-MDM Method: You give us your UPN name, and we give you back a Trial + License File. + +## Option 1: On-Prem or MDM: No license at all, by renaming a computer to have Computer in the name(recommended) + +With Endpoint Policy Manager, you don't even need a license file from us to get started. + +:::note +This is the recommended  way to get going quickly with Endpoint Policy Manager. +::: + + +Simply rename a computer to have Computer in the name, and that's it. You're done. Here are the two +methods of how to do that in Windows. + +Here's a video showing what happens when you rename a computer and how Endpoint Policy Manager +reacts:[Testing and Troubleshooting By Renaming an endpoint Computer](/docs/endpointpolicymanager/deliverymethods/cloud/videos/testlabbestpractices/renameendpoint.md) + +![812_1_image001](/images/endpointpolicymanager/license/812_1_image001.webp) + +After you rename your computer to have Computer in the name, then: + +- Follow these directions to get started with on-Prem Active Directory/ Group Policy: Getting + Started with Group Policy > [Knowledge Base](/docs/endpointpolicymanager/) and/or +- Follow these directions to get started with Endpoint Policy Manager and Intune or another MDM + (making sure to follow the "Walk Before You Run" video): Getting Started with MDM > + [Video Learning Center](/docs/endpointpolicymanager/deliverymethods/mdm/videos/videolearningcenter.md) + +## Option 2: Licenses coming automatically from PolicyPak Cloud + +If you're trying our Endpoint Policy Manager Enterprise, Endpoint Policy Manager Professional or +Endpoint Policy Manager SaaS, they all come with an included Endpoint Policy Manager Cloud license.  +Your trial should automatically generate credentials +to [cloud.endpointpolicymanager.com](http://cloud.endpointpolicymanager.com/) (aka the Endpoint Policy Manager Cloud +Service.) + +When you install the Endpoint Policy Manager Cloud client, a license is automatically taken from +Endpoint Policy Manager Cloud (and also the Endpoint Policy Manager Client Side Extension is +installed.) You install a new machine into Endpoint Policy Manager cloud by installing the Endpoint +Policy Manager Cloud Client, as shown below. + +![812_2_image002](/images/endpointpolicymanager/license/812_2_image002.webp) + +To get started immediately with Endpoint Policy Manager Cloud, check out the Getting Started with +Cloud > [Video Learning Center](/docs/endpointpolicymanager/deliverymethods/cloud/videos/videolearningcenter.md). + +## Option 3: On-Prem / GPO Method: You give us your domain name, we give you back a Trial License File. + +If you want to use Active Directory / GPO method to deliver Endpoint Policy Manager settings, we +need your domain name. And if you have multiple domains, that's fine. We can make you one key which +contains all your domain names. + +The best way to get the domain name would be to run this simple Powershell command: + +``` +$env:userdnsdomain +``` + +It will then produce the output of the domain name, which is the minimum requirement to make you a +license key. + +![812_3_get-fqdn-with-powershell](/images/endpointpolicymanager/license/812_3_get-fqdn-with-powershell.webp) + +Once we generate the key, it will be in the Endpoint Policy Manager +Portal.[How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/licensing/videolearningcenter/installall/installuniversal.md)Then +follow these directions to get started with on-Prem Active Directory/ Group Policy: Group +Policy > [Knowledge Base](/docs/endpointpolicymanager/) + +## Option 4: Intune-specific method: You give us your INTUNE company name, and we give you back a Trial License File. + +If you're using Intune specifically, we can turn on Endpoint Policy Manager for your Intune +instance. We need the Intune Company name. Run this PowerShell script, which will return +`INTUNECOMPANYNAME.TXT`, and send it to your sales person. + +``` +[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12 +Install-PackageProvider -Name NuGet -Scope CurrentUser -Force +Install-Module -Name Microsoft.Graph.Intune -Repository PSGallery -Scope CurrentUser -Force +Connect-MSGraph -AdminConsent +Get-Organization | Select @{N = 'CompanyName'; E = { $_.displayName } } | out-file INTUNECOMPANYNAME.TXT +``` + +Once we generate the key, it will be in the Endpoint Policy Manager Portal. Download the key and +install it using theinstructions found +here: [How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/licensing/videolearningcenter/installall/installuniversal.md) + +Then follow these directions to get started with Endpoint Policy Manager and Intune (making sure to +follow the "Walk Before You Run" video): Getting Started with MDM > +[Video Learning Center](/docs/endpointpolicymanager/deliverymethods/mdm/videos/videolearningcenter.md) + +## Option 5: Non-Intune/Other-MDM Method: You give us your UPN name, and we give you back a Trial License File. + +When you enroll machines into your MDM, you do so with a UPN name. Start out by noting which UPN +name you use, such as [\*@fabrikam.com,](mailto:*@fabrikam.com) or whatever yours is. We recommend +you take a screenshot of this page from an enrolled Windows 10 machine, and then continue. + +![812_4_sdfg](/images/endpointpolicymanager/license/812_4_sdfg.webp) + +Once we generate the key, it will be in the Endpoint Policy Manager Portal. Download the key and +install it using these +instructions: [How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/licensing/videolearningcenter/installall/installuniversal.md) + +Then follow these directions to get started with Endpoint Policy Manager and your MDM service, +making sure to follow the "Walk Before You Run" video: Getting Started with MDM > +[Video Learning Center](/docs/endpointpolicymanager/deliverymethods/mdm/videos/videolearningcenter.md) diff --git a/docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/_category_.json b/docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/_category_.json new file mode 100644 index 0000000000..c36c35fd31 --- /dev/null +++ b/docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Requesting Licenses MDM", + "position": 50, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/adminrights.md b/docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/adminrights.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/adminrights.md rename to docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/adminrights.md diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/autopilot.md b/docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/autopilot.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/autopilot.md rename to docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/autopilot.md diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/domainmultiple.md b/docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/domainmultiple.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/domainmultiple.md rename to docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/domainmultiple.md diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/entraid.md b/docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/entraid.md similarity index 98% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/entraid.md rename to docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/entraid.md index cf5d11e74d..f8f41dd2b9 100644 --- a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/entraid.md +++ b/docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/entraid.md @@ -61,7 +61,7 @@ There is no easy button for this, but it is a straightforward procedure. Typically, you do this with the Endpoint Policy Manager on-prem licensing tool (preferred), or if you need to, you can use PowerShell. -See[My organization doesn't permit me to run the LT (Endpoint Policy Manager Licensing Tool) or provide the XML information it produces. What are my other options?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/options.md) +See[My organization doesn't permit me to run the LT (Endpoint Policy Manager Licensing Tool) or provide the XML information it produces. What are my other options?](/docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/options.md) ![200_3_image-20200723102952-2](/images/endpointpolicymanager/license/mdm/200_3_image-20200723102952-2.webp) diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/hybrid.md b/docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/hybrid.md similarity index 88% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/hybrid.md rename to docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/hybrid.md index 5b4c6217a9..bc1d4d2f8d 100644 --- a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/hybrid.md +++ b/docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/hybrid.md @@ -24,9 +24,9 @@ little later. In this case, you can license Endpoint Policy Manager with Endpoint Policy Manager Group Policy Edition or Endpoint Policy Manager Cloud Edition. -- See All Things Licensing > [Knowledge Base](/docs/endpointpolicymanager/knowledgebase/knowledgebase.md) -- See Cloud edition: [Endpoint Policy Manager Cloud: QuickStart](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/quickstart.md) -- See[Endpoint Policy ManagerCloud and Endpoint Policy Manager OnPremise – Together using PPCloud Licenses](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/usingwithothermethods/onpremise.md) +- See All Things Licensing > [Knowledge Base](/docs/endpointpolicymanager/) +- See Cloud edition: [Endpoint Policy Manager Cloud: QuickStart](/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/quickstart.md) +- See[Endpoint Policy ManagerCloud and Endpoint Policy Manager OnPremise – Together using PPCloud Licenses](/docs/endpointpolicymanager/deliverymethods/cloud/videos/usingwithothermethods/onpremise.md) ## Azure Active Directory (also known as AAD) with or without an MDM service. @@ -55,11 +55,11 @@ you get all the Endpoint Policy Manager features as well. For this method, you are not licensing Azure Active Directory, but rather your MDM service. - See - [When licensing Endpoint Policy Managerwith an MDM provider, what do I need to send in to Endpoint Policy Manager? ](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/setup.md)for + [When licensing Endpoint Policy Managerwith an MDM provider, what do I need to send in to Endpoint Policy Manager? ](/docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/setup.md)for additional information on how to express the UPN and number of licenses needed for licensing your MDM service -- [Endpoint Policy Manager and MDM walk before you run](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/gettingstarted/testsample.md) -- See Getting Started with MDM > [Video Learning Center](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/videolearningcenter.md) +- [Endpoint Policy Manager and MDM walk before you run](/docs/endpointpolicymanager/deliverymethods/mdm/videos/gettingstarted/testsample.md) +- See Getting Started with MDM > [Video Learning Center](/docs/endpointpolicymanager/deliverymethods/mdm/videos/videolearningcenter.md) 2 — Azure AD with no MDM service @@ -70,7 +70,7 @@ cost and moving parts. To do this, you would need to add Endpoint Policy Manager Cloud to your Azure AD by installing the Endpoint Policy Manager Cloud client on your . -See [Endpoint Policy Manager Cloud: QuickStart](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/quickstart.md) for additional +See [Endpoint Policy Manager Cloud: QuickStart](/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/quickstart.md) for additional information on getting started and licensing with Endpoint Policy Manager Cloud edition ## AD Domain Controllers as VMs in Azure @@ -87,10 +87,10 @@ You would typically use Group Policy edition and license a whole domain, OU or O Alternatively, you can use Endpoint Policy Manager Cloud edition and license each machine. -- See All Things Licensing > [Knowledge Base](/docs/endpointpolicymanager/knowledgebase/knowledgebase.md) -- [Endpoint Policy Manager Cloud: QuickStart](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/quickstart.md) +- See All Things Licensing > [Knowledge Base](/docs/endpointpolicymanager/) +- [Endpoint Policy Manager Cloud: QuickStart](/docs/endpointpolicymanager/deliverymethods/cloud/videos/gettingstarted/quickstart.md) - See - [Endpoint Policy ManagerCloud and Endpoint Policy Manager OnPremise – Together using PPCloud Licenses](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/usingwithothermethods/onpremise.md) + [Endpoint Policy ManagerCloud and Endpoint Policy Manager OnPremise – Together using PPCloud Licenses](/docs/endpointpolicymanager/deliverymethods/cloud/videos/usingwithothermethods/onpremise.md) ## Azure AD Domain Services (AS DS) diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/jointype.md b/docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/jointype.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/jointype.md rename to docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/jointype.md diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/name.md b/docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/name.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/name.md rename to docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/name.md diff --git a/docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/setup.md b/docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/setup.md new file mode 100644 index 0000000000..e645cfdbfb --- /dev/null +++ b/docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/setup.md @@ -0,0 +1,102 @@ +--- +title: "When licensing Endpoint Policy Managerwith an MDM provider, what do I need to send in to Endpoint Policy Manager?" +description: "When licensing Endpoint Policy Managerwith an MDM provider, what do I need to send in to Endpoint Policy Manager?" +sidebar_position: 10 +--- + +# When licensing Endpoint Policy Managerwith an MDM provider, what do I need to send in to Endpoint Policy Manager? + +Netwrix Endpoint Policy Manager (formerly PolicyPak) can work with and be licensed with nearly any +MDM service. Use this table below to determine how to get licensed: + +- Intune (Automatic) — Use the Endpoint Policy Manager Portal and download the BITS. Then run the + Licensing Tool (LT) to acquire the information and save it to your License Request Key. See + [How to Request Licenses from Endpoint Policy Manager by Creating a "License Request Key"](/docs/endpointpolicymanager/licensing/videolearningcenter/requestall/licenserequestkey.md) +- Intune (Alternate) — Only if asked, follow the directions on this page. +- VMware Workspace One — Follow the directions on this page. +- Citrix CEM — Follow the directions on this page. +- MobileIron — Follow the directions on this page. +- Other MDMs may or may not be supported, but we'll try. Follow the directions on this page. + +To accurately create license keys for you,Endpoint Policy Manager needs three pieces of information: + +- Your Universal Principal Name (UPN) +- How many licenses are required and +- Proof of ownership of that MDM / domain. + +## Your UPN name (all MDM services) + +When you enroll machines into your MDM, you do so with a UPN name. Start out by noting which UPN +name you use, @fabrikam.com in our example. We recommend you take a screenshot of this page from an +enrolled Windows 10 machine, then continue. + +![44_1_sdfg](/images/endpointpolicymanager/license/812_4_sdfg.webp) + +## License count + +To accurately license your MDM installation, Endpoint Policy Manager needs the following +information: + +- How many machines are actively enrolled in your MDM service +- Screenshots demonstrating the screen shots are of an MDM account your own or control + +If you have a mix of on-prem AD machines, Azure joined machines and Hybrid Azure AD machines please +see + [If I have both Azure joined and Hybrid Azure AD joined machines, how do I count the exact number of licenses I need?](/docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/entraid.md) +for additional information on how to express your count. + +## The Billing Process + +**Step 1 –** Send screenshots of your current usage (see steps below for your specific MDM solution) + +**Step 2 –** Express your expected growth for the upcoming year + +**Step 3 –** You are billed for the total expected usage + +### Windows Intune (alternate method — do not use unless the LT tool isn't working or you are otherwise directed to perform these manual steps.) + +If in the Azure portal, ensure you are in the Intune section. + +![44_2_image-20200815220310-23](/images/endpointpolicymanager/license/mdm/44_2_image-20200815220310-23.jpeg) + +The device Screenshot will demonstrate the total Windows Devices and Tenant ownership: + +![44_4_image-20200815220310-24](/images/endpointpolicymanager/license/mdm/44_4_image-20200815220310-24.jpeg) + +### Workplace One (Airwatch) + +In your Airwatch portal: + +- Click on the **Devices** icon +- In Platforms, locate the Windows Desktops section and take a screenshot of the entire window + +![44_6_image-20200815220310-25](/images/endpointpolicymanager/license/mdm/44_6_image-20200815220310-25.jpeg) + +### MobileIron + +Log into your MobileIron Portal. Your dashboard should show you the number of devices you have +enrolled if Device by OS Type is on your dashboard. If the Pie Chart is shown, click the icon in the +lower-left corner of the Device by OS Type window to change to the Bar Chart. + +![44_8_image-20200815220310-26](/images/endpointpolicymanager/license/mdm/44_8_image-20200815220310-26.jpeg) + +Take a screen shot of the device count and account ownership as per the screenshots below (it may +take 2 captures) + +![44_10_image-20200815220310-27_950x711](/images/endpointpolicymanager/license/mdm/44_10_image-20200815220310-27_950x711.jpeg) + +### Citrix Endpoint Management (CEM – formally XenMobile) + +Option 1: + +On the Analyze page of the CEM Portal, click on the Dashboard. Take a screenshot showing Managed +devices by Platform and the ownership in the top right-hand corner + +![44_12_image-20200815220310-28](/images/endpointpolicymanager/license/mdm/44_12_image-20200815220310-28.webp) + +Option 2: + +From the Analyze page, go to Reporting > Devices & Apps and take a screenshot showing the Device +count and Ownership: + +![44_14_image-20200815220310-29](/images/endpointpolicymanager/license/mdm/44_14_image-20200815220310-29.webp) diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/tool.md b/docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/tool.md similarity index 98% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/tool.md rename to docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/tool.md index cca885a0fa..0dc5af140e 100644 --- a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/tool.md +++ b/docs/endpointpolicymanager/licensing/knowledgebase/requestingmdm/tool.md @@ -115,5 +115,5 @@ Out-Both @($devices).Count Disconnect-MgGraph | Out-Null ``` -See the [MDM Intune company name troubleshooting](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/troubleshooting/mdm.md) video for additional +See the [MDM Intune company name troubleshooting](/docs/endpointpolicymanager/licensing/videolearningcenter/troubleshooting/mdm.md) video for additional information. diff --git a/docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/_category_.json b/docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/_category_.json new file mode 100644 index 0000000000..e27cfae2fc --- /dev/null +++ b/docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Licensing Troubleshooting All Methods", + "position": 70, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/components.md b/docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/components.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/components.md rename to docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/components.md diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/enterprisefull.md b/docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/enterprisefull.md similarity index 93% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/enterprisefull.md rename to docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/enterprisefull.md index b3659c1867..efce9a05fa 100644 --- a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/enterprisefull.md +++ b/docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/enterprisefull.md @@ -97,7 +97,7 @@ is the same as what we are calling "Enterprise Full" here. - Upgrade your MMC snap-in to the latest version first. - Perform these steps: - [How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/installall/installuniversal.md) + [How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/licensing/videolearningcenter/installall/installuniversal.md) :::note Using the Endpoint Policy Manager "LT" tool to install licenses is not recommended, @@ -120,7 +120,7 @@ is the same as what we are calling "Enterprise Full" here. ## How can I tell if the computer is licensed by Enterprise or Enterprise full license keys? - We have an extensive KB article which will help you. Please refer - here:[How can I tell how a machine is licensed (by GPO, MDM, or XML file), and also know for what components it is licensed?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/components.md) + here:[How can I tell how a machine is licensed (by GPO, MDM, or XML file), and also know for what components it is licensed?](/docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/components.md) - The key takeaway though is on an endpoint, run `PPupdate `then look for Enterprise Full expressly listed as seen below, including an Expiry date in the future and seeing that all components are expressed as Complete. @@ -136,13 +136,13 @@ run. ## If Enterprise Full means "License all components" how do I expressly disable a component (like Endpoint Policy Manager Browser Router, or Endpoint Policy Manager Application Settings Manager) if they are always licensed? - Recommended method is to use a Endpoint Policy Manager ADMX setting to specifically unlicense a - component:[What if I want to unlicense specific components via ADMX or Endpoint Policy Manager Cloud?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/componentscloud.md) + component:[What if I want to unlicense specific components via ADMX or Endpoint Policy Manager Cloud?](/docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/componentscloud.md) - Note that Endpoint Policy Manager Preferences 1.0 will still always be "force disabled" by default until specifically licensed as per this - article:[Why is Endpoint Policy Manager Preferences (original version) "forced disabled" by default?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/forceddisabled.md) + article:[Why is Endpoint Policy Manager Preferences (original version) "forced disabled" by default?](/docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/forceddisabled.md) - You can still "hard unlicense" a component inside the XML licensing file. The techniques here still work: - - [How do I specifically exclude or prevent a component from performing processing by modifying the license file?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/componentsexclude.md) + - [How do I specifically exclude or prevent a component from performing processing by modifying the license file?](/docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/componentsexclude.md) :::note Only the updated MMC will nicely show this and have it formatted correctly; which is why @@ -151,7 +151,7 @@ we recommend updating to the latest MMC snap-in. - Get the GUIDs for a license you wish to expressly unlicensed here: - [What CSEs are contained within Endpoint Policy Manager, what are their CSE GUIDs, and in what release did they appear?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/guids.md) + [What CSEs are contained within Endpoint Policy Manager, what are their CSE GUIDs, and in what release did they appear?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/guids.md) ## How can I request Enterprise Full keys (which will also have an Expiry date until the end of my term?) @@ -170,7 +170,7 @@ we recommend updating to the latest MMC snap-in. - Please honor the philosophy of RINGS and don't "blast out" an upgrade CSE to all of your computers at once, so you can control a rollout or a rollback. Use - this guidance: [Using Rings to Test and Update the Endpoint Policy Manager Client-Side Extension and/or Cloud Client (And How to Stay Supported)](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/bestpractices/rings.md) + this guidance: [Using Rings to Test and Update the Endpoint Policy Manager Client-Side Extension and/or Cloud Client (And How to Stay Supported)](/docs/endpointpolicymanager/upgrademaintenance/bestpractices/rings.md) ## What will happen if I do nothing? diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/expires.md b/docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/expires.md similarity index 90% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/expires.md rename to docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/expires.md index 50a6873639..68011e1464 100644 --- a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/expires.md +++ b/docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/expires.md @@ -29,18 +29,18 @@ the GPMC. If you're getting client-side pop-ups, please refer to this article: ::: -[How do I make the Grace Period licensing pop-up go away?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/graceperiod.md) +[How do I make the Grace Period licensing pop-up go away?](/docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/graceperiod.md) Resolution for the Admin's GPMC editing station: - Unlink the old and expiring license after verifying that the new license will cover the same components and OUs/ domain as the soonto-be-expiring license. Delete the old GPO links as well from under any OUs/domain where it was linked. More details here: - [I just installed new license files / new GPOs. Should I keep or delete the old license files / GPOs?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/fileold.md) + [I just installed new license files / new GPOs. Should I keep or delete the old license files / GPOs?](/docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/fileold.md) :::note You can use the LT tool to search through and find OLD licenses so you can be sure you -only have one license remaining. [Using LT for license cleanup](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/troubleshooting/cleanup.md)/ +only have one license remaining. [Using LT for license cleanup](/docs/endpointpolicymanager/licensing/videolearningcenter/troubleshooting/cleanup.md)/ ::: @@ -48,7 +48,7 @@ only have one license remaining. [Using LT for license cleanup](/docs/endpointpo PolicyPak) CSE; which can also include the Admin's GPMC machine) verify the endpoint got the new license successfully. Use this KB article with PPUPDATE directions to see exactly if a machine is properly licensed: - [How can I tell how a machine is licensed (by GPO, MDM, or XML file), and also know for what components it is licensed?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/components.md) + [How can I tell how a machine is licensed (by GPO, MDM, or XML file), and also know for what components it is licensed?](/docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/components.md) Now, on your machine, the one with the GPMC… diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/graceperiod.md b/docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/graceperiod.md similarity index 97% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/graceperiod.md rename to docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/graceperiod.md index 713994321a..b5ba0eabe8 100644 --- a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/graceperiod.md +++ b/docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/graceperiod.md @@ -55,9 +55,9 @@ Renewals which covers the components you wish to cover and timeframe as per your implement the license file. - Here is how to implement a new - license: [How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/installall/installuniversal.md) + license: [How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/licensing/videolearningcenter/installall/installuniversal.md) - Here is how to troubleshoot a new - license: [How can I tell how a machine is licensed (by GPO, MDM, or XML file), and also know for what components it is licensed?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/components.md) + license: [How can I tell how a machine is licensed (by GPO, MDM, or XML file), and also know for what components it is licensed?](/docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/components.md) ## How to change Pop-Up Behavior (previous CSE versions before 24.4) diff --git a/docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/legacy.md b/docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/legacy.md new file mode 100644 index 0000000000..1d838d274b --- /dev/null +++ b/docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/legacy.md @@ -0,0 +1,183 @@ +--- +title: "Action Required for Endpoint Policy Manager Customers using Legacy Licenses" +description: "Action Required for Endpoint Policy Manager Customers using Legacy Licenses" +sidebar_position: 60 +--- + +# Action Required for Endpoint Policy Manager Customers using Legacy Licenses + +## What is happening: + +- The Netwrix Endpoint Policy Manager (formerly PolicyPak) CSE (endpoint piece) is hardcoded to stop + honoring Legacy licenses on Feb 28, 2023… even if you have a Valid Legacy license hitting the + machine. + +## Why is this happening: + +- We started delivering Universal licenses in Jan 2021 thus giving customers two years to upgrade to + make the switch. This is your three-month (and likely final) warning of the impending requirement. + +## Who is NOT affected by this: + +- If you are using CLOUD licensing, you are not affected. +- If you already have Universal licenses in place and no Legacy licenses in place, you are not + affected. + +## Who IS affected by this: + +- If you are using GPO or MDM / XML licensing with Legacy licenses only and... +- You are using CSE version 2687 (21.1.2687.802) or later. + +… Then you are affected. + +## Is this a security concern? + +- No. This is not a security concern. + +## How do I know if I'm using LEGACY licenses, UNIVERSAL licenses, or both? + +- Please watch this video to help you determine your position and situation plus some advice on what + to do. +- Video: [Legacy License Retirement Guidance (for Feb 28, 2023)](/docs/endpointpolicymanager/licensing/videolearningcenter/troubleshooting/legacy.md) + +## Where can I get UNIVERSAL licenses? + +- When we cut keys for new customers who started after 2021, chances are you got only Universal keys + in the first place. +- When we cut keys for existing customers (who started before 2021) we always provided Universal + keys and sometimes provided Legacy keys. +- Therefore: You should be able to pick up your existing keys at portal.endpointpolicymanager.com. Example of + how to find existing keys: + + ![840_1_1](/images/endpointpolicymanager/troubleshooting/license/840_1_1.webp) + +- Only email [support@endpointpolicymanager.com](mailto:support@endpointpolicymanager.com) if you cannot locate your + Universal license because it should already be in the Portal at portal.endpointpolicymanager.com. + +## In the portal, after I download my license keys, how can I tell which are UNIVERSAL and which are LEGACY keys? + +- Example download of valid dates with both Universal and Legacy keys, but only Universal keys will + be honored past Feb 28, 2023: + + ![840_2_2_950x572](/images/endpointpolicymanager/troubleshooting/license/840_2_2_950x572.webp) + +## What must I do to keep PolicyPak working if I am affected?: + +- There are a few strategies you can pursue to keep Endpoint Policy Manager working as expected. +- BEST: + - Import the Universal license and make sure it hits your endpoints. If you do not have a + universal license, you may request one by opening a case at + [Netwrix support](https://www.netwrix.com/sign_in.html?rf=tickets.html#netwrix-support). + Please do not wait until the last minute to get your license as we could have many requests to + field. + - Upgrade the CSE to something recent; hopefully the latest version. +- GOOD, but not as good as BEST: + - Keep using your Legacy licenses which will  naturally expire Feb 28, 2023. + - Update the CSE to the latest version (3421 or later) on your endpoints. + - Use a Endpoint Policy Manager ADMX setting which will give you +90 days to implement the + Universal license. See screen shot below: + +![1231_licenseadmxsetting](/images/endpointpolicymanager/troubleshooting/license/1231_licenseadmxsetting.webp) + +:::note +This ADMX setting only affects CSE 3421 and later is only a stopgap measure if you +literally have no way to transition from Legacy XML to Universal XML, but you do have some way to +update your CSE. +::: + + +- Please honor the philosophy of Rings and don't "blast out" an upgrade CSE to all of your computers + at once so you can control a rollout or a rollback. Use + this guidance: [Using Rings to Test and Update the Endpoint Policy Manager Client-Side Extension and/or Cloud Client (And How to Stay Supported)](/docs/endpointpolicymanager/upgrademaintenance/bestpractices/rings.md) + +## How can I install UNIVERSAL licenses once I have downloaded them? + +- First, upgrade your Admin Console MMC snap in with the latest download from the portal. Only the + latest Admin Consoles can import Universal licenses. +- Video: + [How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/licensing/videolearningcenter/installall/installuniversal.md) + + :::note +   You cannot import both Legacy and Universal licenses into the same GPO. You need + separate GPOs for both license types. If you try to put both licenses into the same GPO you will + get the error: "Sorry but you can't install GP and Enterprise licenses into the same GPO, please + install them to different GPOs or select licenses with the same type." + ::: + + +## What will happen if I do nothing?: + +- If you are using LEGACY licenses and/or very old CSEs which ONLY process LEGACY licenses (so CSEs + before 21.1.2687.802), then Endpoint Policy Manager will keep working because CSEs before + 21.1.2687.802 don't understand Universal licenses anyway. +- If you're using LEGACY licenses and NEWER CSEs (21.1.2687.802 or later), you can expect Endpoint + Policy Manager to stop processing and stop working as if your license file expired on Feb + 28, 2023. + + :::note + Exact behavior when licenses expire can be seen here: + [What happens to each component when Endpoint Policy Manager gets unlicensed or the GPO or policy no longer applies?](/docs/endpointpolicymanager/licensing/knowledgebase/activedirectorygposccm/components_2.md) + ::: + + +## What if I'm applying both Universal and Legacy licenses to an endpoint? + +- If a computer receives both Legacy and Universal licenses, then you should be all set, provided + you are using a CSE (build 2687 and later) on the endpoint. + + :::note + More modern CSEs on the endpoints are preferred. + ::: + + +## How can I validate on a few endpoints that I am Valid and won't expire? + +- Use the `PPUPDATE` command which will always show if you are Valid and licensing type. +- Example of a machine getting Universal licenses successfully: + + ![840_3_3_950x610](/images/endpointpolicymanager/troubleshooting/license/840_3_3_950x610.webp) + +- FAQ on error conditions: + [How can I tell how a machine is licensed (by GPO, MDM, or XML file), and also know for what components it is licensed?](/docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/components.md). +- **NOTE:** The Latest CSE in the portal (build 3375) will also express Invalid licenses if any are + applying to the machine. Example: + + ![840_4_4_950x675](/images/endpointpolicymanager/troubleshooting/license/840_4_4_950x675.webp) + +## Anything else I should know / Bugs & Known Issues? + +Item 1: `PPupdate` may show "Computers with ‘Computer' in the name" while actually being licensed +(CSE 3375 only.) + +This bug exists only in 3375 and doesn't exist in later version of the CSE, such as 3421 and later. + +In build 3375, you might see something like this when you test `PPUPDATE`. + +![840_5_image-20230126194031-1](/images/endpointpolicymanager/troubleshooting/license/840_5_image-20230126194031-1.webp) + +:::tip +Remember, this is a display bug in 3375 which has been removed in the latest CSE version. This +message can safely be ignored. +::: + + +As long as you can see you ARE getting licensed by the Universal key method (see section above +entitled “How can I validate on a few endpoints that I am VALID and won’t expire?”) then you are +free to ignore this bug. + +Item 2: `PolicyPak` Update might show a statement which is a little misleading in CSE 3375 or +earlier. The message is updated for clarity in CSE 3421 and later. + +The message in CSE 3375 and earlier says: “The license is valid. WARNING: GP licenses will no longer +be accepted after Feb 28th, 2023.” + +Example: + +![840_6_image-20230126194031-2_950x764](/images/endpointpolicymanager/troubleshooting/license/840_6_image-20230126194031-2_950x764.webp) + +What it is trying to say is that Legacy XML licenses are not honored beyond Feb 28, 2022. + +You can still use Universal licenses via GPO and/or MDM/XML method. The updated messaging from +latest CSEs is as follows: + +![840_7_image_950x724](/images/endpointpolicymanager/troubleshooting/license/840_7_image_950x724.webp) diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/mmcsnapinlogs.md b/docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/mmcsnapinlogs.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/mmcsnapinlogs.md rename to docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/mmcsnapinlogs.md diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/toollogs.md b/docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/toollogs.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/toollogs.md rename to docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/toollogs.md diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/universal.md b/docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/universal.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/troubleshooting/universal.md rename to docs/endpointpolicymanager/licensing/knowledgebase/troubleshooting/universal.md diff --git a/docs/endpointpolicymanager/licensing/knowledgebase/vertualizationcitrix/_category_.json b/docs/endpointpolicymanager/licensing/knowledgebase/vertualizationcitrix/_category_.json new file mode 100644 index 0000000000..bae5c20ca0 --- /dev/null +++ b/docs/endpointpolicymanager/licensing/knowledgebase/vertualizationcitrix/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Requesting Licenses FAQ And Troubleshooting (Virtualization, Citrix, WVD, ect.)", + "position": 30, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/vertualizationcitrix/count.md b/docs/endpointpolicymanager/licensing/knowledgebase/vertualizationcitrix/count.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/vertualizationcitrix/count.md rename to docs/endpointpolicymanager/licensing/knowledgebase/vertualizationcitrix/count.md diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/vertualizationcitrix/desktops.md b/docs/endpointpolicymanager/licensing/knowledgebase/vertualizationcitrix/desktops.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/vertualizationcitrix/desktops.md rename to docs/endpointpolicymanager/licensing/knowledgebase/vertualizationcitrix/desktops.md diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/vertualizationcitrix/multisession.md b/docs/endpointpolicymanager/licensing/knowledgebase/vertualizationcitrix/multisession.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/vertualizationcitrix/multisession.md rename to docs/endpointpolicymanager/licensing/knowledgebase/vertualizationcitrix/multisession.md diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/vertualizationcitrix/terminalservices.md b/docs/endpointpolicymanager/licensing/knowledgebase/vertualizationcitrix/terminalservices.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/vertualizationcitrix/terminalservices.md rename to docs/endpointpolicymanager/licensing/knowledgebase/vertualizationcitrix/terminalservices.md diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/vertualizationcitrix/tool_1.md b/docs/endpointpolicymanager/licensing/knowledgebase/vertualizationcitrix/tool_1.md similarity index 94% rename from docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/vertualizationcitrix/tool_1.md rename to docs/endpointpolicymanager/licensing/knowledgebase/vertualizationcitrix/tool_1.md index 53c3d3410d..5ff41d9b50 100644 --- a/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/vertualizationcitrix/tool_1.md +++ b/docs/endpointpolicymanager/licensing/knowledgebase/vertualizationcitrix/tool_1.md @@ -30,5 +30,5 @@ sales representative. There are also multiple ways the Endpoint Policy Manager On-Prem suite can be licensed for Citrix. For understanding all the scenarios, please see the following additional technotes: -- [How are Terminal Services and/or Citrix connections licensed?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/vertualizationcitrix/terminalservices.md) +- [How are Terminal Services and/or Citrix connections licensed?](/docs/endpointpolicymanager/licensing/knowledgebase/vertualizationcitrix/terminalservices.md) - [Citrix & WVD Multi-session Windows Licensing Scenarios](https://www.endpointpolicymanager.com/purchasing/vdi-licensing-scenarios/) diff --git a/docs/endpointpolicymanager/licensing/videolearningcenter/_category_.json b/docs/endpointpolicymanager/licensing/videolearningcenter/_category_.json new file mode 100644 index 0000000000..cb657b91c6 --- /dev/null +++ b/docs/endpointpolicymanager/licensing/videolearningcenter/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Video Learning Center", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "videolearningcenter" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/licensing/videolearningcenter/installall/_category_.json b/docs/endpointpolicymanager/licensing/videolearningcenter/installall/_category_.json new file mode 100644 index 0000000000..d103be6b72 --- /dev/null +++ b/docs/endpointpolicymanager/licensing/videolearningcenter/installall/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Licensing Install All Methods Universal Licenses For Customers After 2021", + "position": 20, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/installall/installuniversal.md b/docs/endpointpolicymanager/licensing/videolearningcenter/installall/installuniversal.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/installall/installuniversal.md rename to docs/endpointpolicymanager/licensing/videolearningcenter/installall/installuniversal.md diff --git a/docs/endpointpolicymanager/licensing/videolearningcenter/installalllegacy/_category_.json b/docs/endpointpolicymanager/licensing/videolearningcenter/installalllegacy/_category_.json new file mode 100644 index 0000000000..eec5d63eb4 --- /dev/null +++ b/docs/endpointpolicymanager/licensing/videolearningcenter/installalllegacy/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Licensing Install All Methods Universal Licenses For Customers Before 2021", + "position": 30, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/installalllegacy/upgrades.md b/docs/endpointpolicymanager/licensing/videolearningcenter/installalllegacy/upgrades.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/installalllegacy/upgrades.md rename to docs/endpointpolicymanager/licensing/videolearningcenter/installalllegacy/upgrades.md diff --git a/docs/endpointpolicymanager/licensing/videolearningcenter/requestall/_category_.json b/docs/endpointpolicymanager/licensing/videolearningcenter/requestall/_category_.json new file mode 100644 index 0000000000..76400dbe44 --- /dev/null +++ b/docs/endpointpolicymanager/licensing/videolearningcenter/requestall/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Licensing Request All Methods", + "position": 10, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/requestall/licenserequestkey.md b/docs/endpointpolicymanager/licensing/videolearningcenter/requestall/licenserequestkey.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/requestall/licenserequestkey.md rename to docs/endpointpolicymanager/licensing/videolearningcenter/requestall/licenserequestkey.md diff --git a/docs/endpointpolicymanager/licensing/videolearningcenter/troubleshooting/_category_.json b/docs/endpointpolicymanager/licensing/videolearningcenter/troubleshooting/_category_.json new file mode 100644 index 0000000000..7d2564a42f --- /dev/null +++ b/docs/endpointpolicymanager/licensing/videolearningcenter/troubleshooting/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Troubleshooting And Un-Licensing", + "position": 40, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/troubleshooting/cleanup.md b/docs/endpointpolicymanager/licensing/videolearningcenter/troubleshooting/cleanup.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/troubleshooting/cleanup.md rename to docs/endpointpolicymanager/licensing/videolearningcenter/troubleshooting/cleanup.md diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/troubleshooting/legacy.md b/docs/endpointpolicymanager/licensing/videolearningcenter/troubleshooting/legacy.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/troubleshooting/legacy.md rename to docs/endpointpolicymanager/licensing/videolearningcenter/troubleshooting/legacy.md diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/troubleshooting/lttool.md b/docs/endpointpolicymanager/licensing/videolearningcenter/troubleshooting/lttool.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/troubleshooting/lttool.md rename to docs/endpointpolicymanager/licensing/videolearningcenter/troubleshooting/lttool.md diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/troubleshooting/mdm.md b/docs/endpointpolicymanager/licensing/videolearningcenter/troubleshooting/mdm.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/troubleshooting/mdm.md rename to docs/endpointpolicymanager/licensing/videolearningcenter/troubleshooting/mdm.md diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/troubleshooting/renameendpoint.md b/docs/endpointpolicymanager/licensing/videolearningcenter/troubleshooting/renameendpoint.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/troubleshooting/renameendpoint.md rename to docs/endpointpolicymanager/licensing/videolearningcenter/troubleshooting/renameendpoint.md diff --git a/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/troubleshooting/unlicense.md b/docs/endpointpolicymanager/licensing/videolearningcenter/troubleshooting/unlicense.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/troubleshooting/unlicense.md rename to docs/endpointpolicymanager/licensing/videolearningcenter/troubleshooting/unlicense.md diff --git a/docs/endpointpolicymanager/licensing/videolearningcenter/videolearningcenter.md b/docs/endpointpolicymanager/licensing/videolearningcenter/videolearningcenter.md new file mode 100644 index 0000000000..febb74f590 --- /dev/null +++ b/docs/endpointpolicymanager/licensing/videolearningcenter/videolearningcenter.md @@ -0,0 +1,28 @@ +--- +title: "Video Learning Center" +description: "Video Learning Center" +sidebar_position: 20 +--- + +# Video Learning Center + +See the following Video topics for more information on Endpoint Policy Manager licensing. + +## Licensing Request: All Methods + +- [How to Request Licenses from Endpoint Policy Manager by Creating a "License Request Key"](/docs/endpointpolicymanager/licensing/videolearningcenter/requestall/licenserequestkey.md) + +## Licensing Install: All Methods (Universal Licenses for customers after 2021) + +- [How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/licensing/videolearningcenter/installall/installuniversal.md) + +## Licensing Install: All Methods (Universal Licenses for customers before 2021) + +- [Endpoint Policy Manager: Universal and Original Licensing Installation and Upgrades for Existing Customers](/docs/endpointpolicymanager/licensing/videolearningcenter/installalllegacy/upgrades.md) + +## Troubleshooting and Un-Licensing + +- [Legacy License Retirement Guidance (for Feb 28, 2023)](/docs/endpointpolicymanager/licensing/videolearningcenter/troubleshooting/legacy.md) +- [How to Un-License any Endpoint Policy ManagerComponent via ADMX or Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/licensing/videolearningcenter/troubleshooting/unlicense.md) +- [Using LT for license cleanup](/docs/endpointpolicymanager/licensing/videolearningcenter/troubleshooting/cleanup.md) +- [MDM Intune company name troubleshooting](/docs/endpointpolicymanager/licensing/videolearningcenter/troubleshooting/mdm.md) diff --git a/docs/endpointpolicymanager/manuals/_category_.json b/docs/endpointpolicymanager/manuals/_category_.json deleted file mode 100644 index e61647c49d..0000000000 --- a/docs/endpointpolicymanager/manuals/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Netwrix Endpoint Policy Manager (formerly PolicyPak) User Manuals", - "position": 30, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "manuals" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/_category_.json b/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/_category_.json deleted file mode 100644 index edc42e7a73..0000000000 --- a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "App Delivery And Patching Pak", - "position": 80, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/_category_.json b/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/_category_.json deleted file mode 100644 index 3dced3ef60..0000000000 --- a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Remote Work Delivery Manager", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/exportcollections.md b/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/exportcollections.md deleted file mode 100644 index 99e7ebcadc..0000000000 --- a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/exportcollections.md +++ /dev/null @@ -1,57 +0,0 @@ ---- -title: "Exporting Collections" -description: "Exporting Collections" -sidebar_position: 60 ---- - -# Exporting Collections - -In Appendix A:[Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/uemtools.md), you can -learn how to use the Netwrix Endpoint Policy Manager (formerly PolicyPak) Exporter to wrap up -Endpoint Policy Manager directives and deliver them using Endpoint Policy Manager Cloud, an MDM -service, or a non-Group Policy method such as MEMCM, KACE, and so on. - -:::note -For a video demonstrating the use of Endpoint Policy Manager Remote Work Delivery Manager -with Endpoint Policy Manager MDM see -[Copy files and keep them up to date with your MDM service](/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/methods/mdm.md). -::: - - -Remember that Endpoint Policy Manager Remote Work Delivery Manager policies can be created and -exported on the User side or Computer side. In the example below you can see an export from the User -side. - -![exporting_collections](/images/endpointpolicymanager/remoteworkdelivery/exporting_collections.webp) - -Choosing this option from the User side will allow the user to export the policy or collection for -later use with Endpoint Policy Manager Cloud or an MDM service. - -Below you can see an Export of Endpoint Policy Manager Remote Work Delivery Manager XML from the -Computer side. - -![exporting_collections_1](/images/endpointpolicymanager/remoteworkdelivery/exporting_collections_1.webp) - -Choosing this option from the Computer side will allow the user to export the Policy or collection -for later use with Endpoint Policy Manager Cloud or an MDM service. - -Here are some helpful tips to decide which side to use: - -- When you export a user-side policy and deploy it using Endpoint Policy Manager Cloud or MDM, it - will apply to every user on the machine (like switched mode). -- When you export a computer-side policy (which affects the system) and deploy it using Endpoint - Policy Manager Cloud or MDM, it will apply to the computer as System. -- When you export a computer-side policy (which affects all users on the machine), and deploy it - using Endpoint Policy Manager Cloud or MDM, it will apply to every user on the machine (like - switched mode). - -:::note -See -[Deploying Endpoint Policy Managerdirectives without Group Policy (Endpoint Policy Manager Exporter Utility)](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/exportingtips/exporterutility.md) -for additional information on how to export policies and use Endpoint Policy Manager Exporter -::: - - -Note that exported collections or policies maintain any Item-Level Targeting set within them. If -you've used items that represent Group Membership in Active Directory, then those items will only -function when the machine is domain-joined. diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/gettoknow/_category_.json b/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/gettoknow/_category_.json deleted file mode 100644 index 62d3c7f949..0000000000 --- a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/gettoknow/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Getting to Know Remote Work Delivery Manager", - "position": 30, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "gettoknow" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/gettoknow/gettingstarted/_category_.json b/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/gettoknow/gettingstarted/_category_.json deleted file mode 100644 index 96e3682b66..0000000000 --- a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/gettoknow/gettingstarted/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Quick Start - Using Remote Work Delivery Manager to Copy and Install a Single File", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/overview.md b/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/overview.md deleted file mode 100644 index 2418e4946e..0000000000 --- a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/overview.md +++ /dev/null @@ -1,76 +0,0 @@ ---- -title: "Remote Work Delivery Manager" -description: "Remote Work Delivery Manager" -sidebar_position: 10 ---- - -# Remote Work Delivery Manager - -:::note -Before reading this section, please ensure you have read Book 2: -[Installation Quick Start](/docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/overviewinstall.md), which will help you -learn to do the following: -::: - - -- Install the Admin MSI on your GPMC machine -- Install the CSE on a test Windows machine -- Set up a computer in Trial mode or Licensed mode -- Set up a common OU structure - -Optionally, if you don't want to use Group Policy, read the section in Appendix A: -[Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/uemtools.md) to deploy your -directives. - -Netwrix Endpoint Policy Manager (formerly PolicyPak) Remote Work Delivery Manager (PPRWDM) enables -you to perform the following operations on Windows: - -- Copy files from a server to a client -- Copy files recursively within SMB (standard file share) folders -- Keep files up to date between an SMB share and a desktop or laptop -- Copy files from an HTTP(S) source, like OneDrive, Dropbox, Amazon S3, and some other services, to - a desktop - -:::note -See [Install software with SMB (standard share)](/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/gettingstarted/smb.md)for an -overview of PolicyPak Remote Work Delivery Manager. -::: - - -Endpoint Policy Manager Remote Work Delivery Manager allows you to do the following: - -- Create a rule to express which files, directory, or patterns, should be copied from which SMB - share to a client. -- Create a rule to express which file should be copied from an HTTP(s) source to a client. -- Instead of using the Group Policy method, you can export the Endpoint Policy Manager Remote Work - Delivery Manager rules and deliver them in one of four ways: - - - MEMCM - - Your own systems management software - - An MDM service - - Endpoint Policy Manager Cloud service - -- Allow the client machine with the Endpoint Policy Manager client-side extension (CSE) to embrace - the directives and perform the work. - -:::note -If you use theEndpoint Policy Manager Cloud service, you can deliver Group Policy settings -even to non-domain-joined machines over the Internet. -::: - - -## Moving Parts - -- A management station — The Endpoint Policy Manager Admin Console MSI must be installed on the - management station where you create GPOs. Once it is installed, you'll see the Endpoint Policy - Manager | Endpoint Policy Manager Remote Work Delivery Manager node. -- The Endpoint Policy Manager CSE — This runs on the client (target) machine and is the same CSE for - all Endpoint Policy Manager products. There isn't anything separate to install, and the Endpoint - Policy Manager CSE must be present in order to accept Endpoint Policy Manager Remote Work Delivery - Manager directives via Group Policy, or when using MEMCM, KACE, MDM, or similar utilities. -- Endpoints — In order to use these, they must be licensed for Endpoint Policy Manager Remote Work - Delivery Manager using one of the licensing methods, which are described in Book 1: - [Introduction and Basic Concepts](/docs/endpointpolicymanager/manuals/introductionandquick/basicconcepts/basicconcepts.md). -- PolicyPak Exporter (optional) — A free utility that lets you take Endpoint Policy Manager Admin - Templates Manager and our other products' XML files and wrap them into a portable MSI file for - deployment using MEMCM, an MDM service, or your own systems management software. diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/remoteworkdelivery/_category_.json b/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/remoteworkdelivery/_category_.json deleted file mode 100644 index 304e0d1ae2..0000000000 --- a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/remoteworkdelivery/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Tips, Security, and Troubleshooting", - "position": 80, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/remoteworkdelivery/tips/_category_.json b/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/remoteworkdelivery/tips/_category_.json deleted file mode 100644 index c36dbe2c6e..0000000000 --- a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/remoteworkdelivery/tips/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Tips: Wildcards and Variables", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/softwarepackage/_category_.json b/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/softwarepackage/_category_.json deleted file mode 100644 index 9049a924ef..0000000000 --- a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/softwarepackage/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Software Package Manager", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/softwarepackage/appx/_category_.json b/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/softwarepackage/appx/_category_.json deleted file mode 100644 index 4874a8618c..0000000000 --- a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/softwarepackage/appx/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "AppX Policies and Settings", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/softwarepackage/exportcollections.md b/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/softwarepackage/exportcollections.md deleted file mode 100644 index 6e91880602..0000000000 --- a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/softwarepackage/exportcollections.md +++ /dev/null @@ -1,23 +0,0 @@ ---- -title: "Exporting Collections" -description: "Exporting Collections" -sidebar_position: 40 ---- - -# Exporting Collections - -Appendix A: [Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/uemtools.md) explains how -to use the Netwrix Endpoint Policy Manager (formerly PolicyPak) Exporter to wrap up any Endpoint -Policy Manager directives and deliver them using Microsoft Endpoint Manager (SCCM and Intune), KACE, -your own MDM service, or Endpoint Policy Manager Cloud. - -To export a policy for later use using Endpoint Policy Manager Exporter or Endpoint Policy Manager -Cloud, right-click the collection or the policy and select **Export to XML**. This will enable you -to save an XML file, which you can use later. - -![exporting_collections](/images/endpointpolicymanager/softwarepackage/exporting_collections.webp) - -Remember that Endpoint Policy Manager RDP policies can be created and exported on the User or -Computer side. For instance, below you can see an item being exported from the Computer side. - -![exporting_collections_1](/images/endpointpolicymanager/softwarepackage/exporting_collections_1.webp) diff --git a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/softwarepackage/overview.md b/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/softwarepackage/overview.md deleted file mode 100644 index 32dfb9b9f6..0000000000 --- a/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/softwarepackage/overview.md +++ /dev/null @@ -1,23 +0,0 @@ ---- -title: "Software Package Manager" -description: "Software Package Manager" -sidebar_position: 20 ---- - -# Software Package Manager - -Netwrix Endpoint Policy Manager (formerly PolicyPak) Software Package Manager enables you to deliver -or remove pre-packaged software. The only type of supported software you can deliver or remove is -Microsoft Store applications, also known as UWP (Universal Windows Platform applications), or AppX -packages. - -For AppX packages, you can do the following with Software Package Manager: - -- Remove unwanted games like Candy Crush Saga or some built-in applications like Skype. -- Deploy applications from the Microsoft Store like Slack, Netflix, or Power BI. -- Work with Endpoint Policy Manager Least Privilege Manager to tighten down specifically which - Windows applications can and cannot run. - -Watch this video for an overview of See Endpoint Policy Manager Software Package Manager: -[Endpoint Policy Manager Software Package Manager: AppX Manager](/docs/endpointpolicymanager/knowledgebase/softwarepackage/videolearningcenter/appxpoliciesitems/appxmanager.md) -for additional information. diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/_category_.json b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/_category_.json deleted file mode 100644 index c28110103a..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Apps Browsers And Java Security Pak", - "position": 40, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/_category_.json b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/_category_.json deleted file mode 100644 index 880109dc91..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Application Settings Manager", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/applicationsettings/_category_.json b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/applicationsettings/_category_.json deleted file mode 100644 index 98fbf67959..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/applicationsettings/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Troubleshooting", - "position": 80, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/appsetfiles/_category_.json b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/appsetfiles/_category_.json deleted file mode 100644 index 7a9be312b3..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/appsetfiles/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "AppSet Files", - "position": 40, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/_category_.json b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/_category_.json deleted file mode 100644 index 2f0913fd90..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "DesignStudio", - "position": 110, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/applicationsprojects/_category_.json b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/applicationsprojects/_category_.json deleted file mode 100644 index 94957da1e2..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/applicationsprojects/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Special Applications and Project Types", - "position": 150, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/configurationwizard/_category_.json b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/configurationwizard/_category_.json deleted file mode 100644 index a3a4f499db..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/configurationwizard/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Configuring Elements Using the Configuration Wizard", - "position": 60, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/configurationwizard/elements/_category_.json b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/configurationwizard/elements/_category_.json deleted file mode 100644 index e854c30941..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/configurationwizard/elements/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Configuring Elements", - "position": 60, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/discover/_category_.json b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/discover/_category_.json deleted file mode 100644 index 2a86e682ae..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/discover/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Discovering Configuration Data Locations", - "position": 50, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/navigation/_category_.json b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/navigation/_category_.json deleted file mode 100644 index 65de3c1d23..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/navigation/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Getting Around", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/navigation/tab/_category_.json b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/navigation/tab/_category_.json deleted file mode 100644 index 0ac98cde10..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/navigation/tab/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Tabs", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/overview.md b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/overview.md deleted file mode 100644 index 6a3a7f6fb5..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/overview.md +++ /dev/null @@ -1,23 +0,0 @@ ---- -title: "DesignStudio" -description: "DesignStudio" -sidebar_position: 110 ---- - -# DesignStudio - -This document will help you to understand Netwrix Endpoint Policy Manager (formerly PolicyPak) -DesignStudio. However, you should only use this document after you have read and worked through the -DesignStudio example in Book 3: - -Application Settings Manager. We assume in this manual that you have already read that document and -can create simple AppSets. - -This document is a reference guide for the rest of the DesignStudio utility and addresses some -advanced scenarios. We won't be using this guide to build any one specific AppSet. Rather, we will -move from application to application pointing out some tips, tricks, and quirks which might be -applicable to many scenarios while building AppSets. - -Video: You may also wish to watch our DesignStudio videos, which cover some higher level details of -Endpoint Policy Manager: Application Manager > -[DesignStudio How-To](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/videolearningcenter.md). diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/quickstart/_category_.json b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/quickstart/_category_.json deleted file mode 100644 index ec737a5e19..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/quickstart/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Quick Start", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/quickstart/overview.md b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/quickstart/overview.md deleted file mode 100644 index 47b932da99..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/quickstart/overview.md +++ /dev/null @@ -1,38 +0,0 @@ ---- -title: "Quick Start" -description: "Quick Start" -sidebar_position: 10 ---- - -# Quick Start - -Netwrix Endpoint Policy Manager (formerly PolicyPak) DesignStudio is where you can create your own -AppSets or edit AppSets that we provide to you. PolicyPak DesignStudio can scrape the interfaces -from your existing applications, such as WinZip, and bring them into the Endpoint Policy Manager -format for later use inside Group Policy Objects (GPOs). - -Video: To see an overview of how to use Endpoint Policy Manager DesignStudio, watch this video: -[Creating Your First Pak using Endpoint Policy Manager Design Studio](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/designstudio/firstpak.md). - -:::note -The Endpoint Policy Manager format is properly called "pXML" format. You most likely will -never need to edit any pXML files by hand, but you're welcome to open up and explore the files that -are produced by the wizard. -::: - - -In this guide, you will be creating an AppSet for PuTTY, and open source SSH and telnet client. -You'll be doing the work on your Endpoint Policy Manager creation station. You'll also be using the -pre-configured AppSet for WinZip as a demonstration for other examples throughout this guide. - -Tip: We recommend that your Endpoint Policy Manager creation station have the same operating system -(and version) that your target machine does, if possible. Having a Endpoint Policy Manager creation -station that is a Server 2016 machine and a target machine that is a Windows 10 machine, for -example, may work fine. However, for ideal application compatibility, it's best if your Endpoint -Policy Manager creation station is as close as possible to your target machine. - -To keep things simple, we'll assume you'll be creating your AppSets from the same machine you used -to create GPOs. However, note that it is common to separate out these two roles, and Endpoint Policy -Manager makes it easy to do so. In this discussion, we'll assume you're using a Windows 10 machine -with the RSAT tools and the GPMC enabled. This will now be your Group Policy management station and -your Endpoint Policy Manager creation station. diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/tools/_category_.json b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/tools/_category_.json deleted file mode 100644 index 2bbb5559fe..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/tools/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Using DesignStudio Tools", - "position": 130, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/tools/options/_category_.json b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/tools/options/_category_.json deleted file mode 100644 index 8317fe670c..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/tools/options/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Options", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/userinterface/_category_.json b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/userinterface/_category_.json deleted file mode 100644 index 9802dcd8d7..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/userinterface/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Crafting the User Interface of Your AppSet", - "position": 30, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/userinterface/manualedits/_category_.json b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/userinterface/manualedits/_category_.json deleted file mode 100644 index 2fdb8960dd..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/designstudio/userinterface/manualedits/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Manual Edits", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/extras/_category_.json b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/extras/_category_.json deleted file mode 100644 index b3b83a9e5f..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/extras/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Extras", - "position": 30, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/_category_.json b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/_category_.json deleted file mode 100644 index e0c9cd42a0..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Firefox AppSet", - "position": 90, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/addons/_category_.json b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/addons/_category_.json deleted file mode 100644 index 480be230d8..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/addons/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Add-Ons", - "position": 40, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/preferences.md b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/preferences.md deleted file mode 100644 index a33259b71b..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/firefox/preferences.md +++ /dev/null @@ -1,102 +0,0 @@ ---- -title: "Hiding Preferences Pages and Other Special Elements" -description: "Hiding Preferences Pages and Other Special Elements" -sidebar_position: 50 ---- - -# Hiding Preferences Pages and Other Special Elements - -Netwrix Endpoint Policy Manager (formerly PolicyPak) is able to hide many Firefox elements, -sometimes with only one click. - -Video: To see a video of Endpoint Policy Manager disabling various Firefox user interface (UI) pages -see -[Disable the following about:config, about:addons, pages, Developer Menu, and any Preferences in one click](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/disable.md). - -For instance, you can select "Hide about:config UI" in the About:Config tab, as shown in Figure 32. - -![hiding_preferences_pages_and](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/hiding_preferences_pages_and.webp) - -Figure 32. Hiding the about:config page. - -Endpoint Policy Manager can hide the about:addons page UI with a checkbox in the Add-Ons: -Extensions, Appearance, Plugins, and Service page, as shown in Figure 33. - -![hiding_preferences_pages_and_1](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/hiding_preferences_pages_and_1.webp) - -Figure 33. Hiding the about:addons page. - -Endpoint Policy Manager can allow you to hide the Australis menu in FireFox (seen in Figure 34) by -clicking the "Hide Australis button" in the Extras tab, as shown in Figure 35. Endpoint Policy -Manager can also provide you with the ability to disable the web developer menu and many other -special pages, as shown in Figure 35. - -![hiding_preferences_pages_and_2](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/hiding_preferences_pages_and_2.webp) - -Figure 34. The Australis menu. - -![hiding_preferences_pages_and_3](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/hiding_preferences_pages_and_3.webp) - -Figure 35. Disabling the web developer menu and other special pages. - -Note that some of the options specifically require that the settings be right-clicked and locked in -order to work. This means they must be deployed on the Computer side, because only Group Policy -Objects (GPOs) based on the Computer side can be locked with the Firefox AppSet. - -Lastly, Endpoint Policy Manager has another huge array of special things that can be hidden within -the About:Preferences tab, as shown in Figure 36. - -![hiding_preferences_pages_and_4](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/hiding_preferences_pages_and_4.webp) - -Figure 36. Hiding preferences. - -The items on the left only require one click to get the expected response in Firefox. The special -box on the right can remove nearly every element in Firefox, but you need to know the special -element ID. - -Video: To see a video of Endpoint Policy Manager removing elements in about:prefrences, go to -[Firefox Remove Specific Elements from about:preferences panel](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/firefox/removeelements.md). - -For instance, let's imagine you wanted to hide the element "Play DRM-controlled content" in the -Content section, as shown in Figure 37. In this example, we did a search for DRM rather than -navigate to it through the menus. - -![hiding_preferences_pages_and_5](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/hiding_preferences_pages_and_5.webp) - -Figure 37. Hiding DRM-controlled content. - -Start by opening the Firefox web developer tools (press Ctrl + Shift + I) or select Options | -Developer | Toggle Tools, as shown in Figure 38. - -![hiding_preferences_pages_and_6](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/hiding_preferences_pages_and_6.webp) - -Figure 38. Web developer menu. - -Then, as shown in Figure 39, click the selector icon all the way on the left side, then click the -"Play DRM content" element. The element will light up with a red dotted box, and in the Inspector -pane, you'll see the element ID. - -![hiding_preferences_pages_and_7](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/hiding_preferences_pages_and_7.webp) - -Figure 39. Selecting the "Play DRM content" element. - -In this case, `checkbox id=" playDRMContent"`. Copy its value into the textbox in Firefox 23.0 -AppSet, as shown in Figure 40. You can also see another value, useMasterPassword, there as well to -show how multiple values are separated by commas. - -![hiding_preferences_pages_and_8](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/hiding_preferences_pages_and_8.webp) - -Figure 40. Copying the value to the Firefox 23.0 textbox. - -:::warning -All values are comma separated instead of being one per line. -::: - - -The result once Group Policy applies and Firefox is restarted is that the element is hidden. - -![hiding_preferences_pages_and_9](/images/endpointpolicymanager/applicationsettings/preconfigured/firefox/hiding_preferences_pages_and_9.webp) - -Figure 41. The DRM content setting is now hidden. - -Later, if the element ID is removed from the MMC, it will return back. diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/internetexplorer/_category_.json b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/internetexplorer/_category_.json deleted file mode 100644 index 1998f21add..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/internetexplorer/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Internet Explorer AppSet", - "position": 100, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/internetexplorer/tab/_category_.json b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/internetexplorer/tab/_category_.json deleted file mode 100644 index 6f09f2b1ad..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/internetexplorer/tab/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "IE AppSet Tabs", - "position": 30, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/modes/_category_.json b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/modes/_category_.json deleted file mode 100644 index b9c3f8f67d..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/modes/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Modes", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/overview_1.md b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/overview_1.md deleted file mode 100644 index f9cd7db92f..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/overview_1.md +++ /dev/null @@ -1,101 +0,0 @@ ---- -title: "Backup, Restore, and XML Export and Import" -description: "Backup, Restore, and XML Export and Import" -sidebar_position: 50 ---- - -# Backup, Restore, and XML Export and Import - -In this section, we're going to learn about how to backup and restore with regards to Netwrix -Endpoint Policy Manager (formerly PolicyPak) Application Settings Manager and understand how -Endpoint Policy Manager Application Settings Manager performs Group Policy reporting. - -Let's recall the three pieces that constitute Endpoint Policy Manager Application Settings Manager: - -- The pXML file created using Endpoint Policy Manager DesignStudio. This is your source file that - defines your AppSet. -- The Endpoint Policy Manager extension DLL. This is the output after you compile your pXML file, - which enables you to see your AppSet inside the group policy object (GPO). -- The Endpoint Policy Manager Application Settings Manager data that is stored in the GPO. This - defines the precise settings inside your GPO. - -## Backup and Restore - -:::note -Video: For an overview video of how to backup and restore, please see this -video:[Endpoint Policy Manager Application Settings Manager: Backup, Restore, Export, Import](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/upgradingmaintenance/backup.md). -::: - - -The three pieces that constitute Endpoint Policy Manager Application Settings Manager should be -backed up in case of loss, failure, overwriting, or some other damage. Below, we describe some -suggested best practices for backing up your files. - -The pXML files you create with the Endpoint Policy Manager DesignStudio should be placed in a secure -place and be available in case of loss or damage. These are only text (XML) files and can be easily -stored. Be sure to have backups of these files in case of an emergency. Treat them like any other -important document in your company. - -The Endpoint Policy Manager extension DLLs are best placed in the Central Storage. These files are -then replicated to all domain controllers and are available for use when administrators roam from -machine to machine creating GPOs. However, these should also be backed up and stored in a secure -place where they can be available in case the Central Storage is damaged or someone deletes a -Endpoint Policy Manager extension DLL from it. These files are usually quite small and can be easily -stored. - -The Endpoint Policy Manager Application Settings Manager data inside a GPO is backed up and restored -with normal GPMC backup procedures, as seen in Figure 90. - -![backup_restore_and_xml_export](/images/endpointpolicymanager/troubleshooting/applicationsettings/backup/backup_restore_and_xml_export.webp) - -Figure 90. Backing up data with normal GPMC backup procedures. - -If a GPO is ever deleted, its data can be quickly restored using the GPMC's "Manage Backups" option, -also seen in Figure 89. - -When restoring, the Endpoint Policy Manager Application Settings Manager data and all the modes -(Enforcement, Reversion, and Endpoint Policy Manager AppLock™) are restored. - -## Settings for XML Export and Import - -:::note -For an overview of exporting and importing settings, please see this video: -[Endpoint Policy Manager Application Settings Manager: Backup, Restore, Export, Import](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/upgradingmaintenance/backup.md) -(at the 2 minute and 50 second mark). -::: - - -The exact settings you specified inside an AppSet within a GPO can be exported and imported. This -might be useful if you have to test out different scenarios (perhaps again and again) but don't want -to start fresh every time with the defaults you set within the AppSet. You might also want to -configure a group of settings within an AppSet and share those exact settings with another -administrator for later implementation. - -The idea of exporting is simple: use your AppSet, set your settings, click on the Options button, -and then select "Export" to export the data, as seen in Figure 91. - -![backup_restore_and_xml_export_1](/images/endpointpolicymanager/troubleshooting/applicationsettings/backup/backup_restore_and_xml_export_1.webp) - -Figure 91. The exact settings you specified inside a Pak within a GPO can be exported and, later, -imported by selecting one of these options. - -You will be prompted for a location to save your data. Be sure to give a name that makes sense for -your AppSet, configuration scenario, or test case. Note that the file is an XML file and can only be -used to import data into the same (or very similarly configured) AppSet. It cannot be loaded into -the Endpoint Policy Manager DesignStudio or used for any other purpose. - -When you're ready, you can reverse the process by using the Endpoint Policy Manager | Import -function to import your previously exported settings. Note that an import will only change elements -that are defined within the XML you are importing. That is, the import process may overwrite some -existing values, and it may also leave existing values alone. Again, only values defined in the XML -are changed upon import. - -:::note -Exporting settings in XML is different than XML data export, which is described in -Appendix A: Using Endpoint Policy Manager with MDM and UEM Tools. Use "Exporting Directives as XML -Data Files" to export settings to save or reload into Group Policy Objects. Use XML data export -(Appendix A) to deploy Endpoint Policy Manager settings without using Group Policy Objects, for -instance, with use of Microsoft Endpoint Configuration Manager, Endpoint Policy Manager MDM or -Endpoint Policy Manager Cloud. - -::: diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/quickstartwithprecon/_category_.json b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/quickstartwithprecon/_category_.json deleted file mode 100644 index b542366e6a..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/quickstartwithprecon/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Quick Start With Preconfigured AppSets", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/underhood/_category_.json b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/underhood/_category_.json deleted file mode 100644 index 01fd03c2d8..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/underhood/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Reporting and What's Happening \"Under the Hood\"", - "position": 70, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/_category_.json b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/_category_.json deleted file mode 100644 index e9f8d35608..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Browser Router", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/internetexplorer/_category_.json b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/internetexplorer/_category_.json deleted file mode 100644 index 96c4b6b339..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/internetexplorer/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Understanding Browser Router and Internet Explorer", - "position": 80, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/internetexplorer/overview.md b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/internetexplorer/overview.md deleted file mode 100644 index 08f0272331..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/internetexplorer/overview.md +++ /dev/null @@ -1,88 +0,0 @@ ---- -title: "Understanding Browser Router and Internet Explorer" -description: "Understanding Browser Router and Internet Explorer" -sidebar_position: 80 ---- - -# Understanding Browser Router and Internet Explorer - -Endpoint Policy Manager Browser Router has special functions for managing Internet Explorer. First, -you can set Internet Explorer 11's Enterprise Mode and Document Modes for an individual website. -Second, there are also two overriding policies that help route many websites to Internet Explorer, -which is something that IT departments often want to do. - -## Setting Internet Explorer Enterprise Modes and Document Modes - -Internet Explorer 11, when patched to certain levels, will embrace Enterprise Mode (EM) and Document -Modes (DM). Internet Explorer 11 EM and DM enable you to tell Internet Explorer 11 how to render -certain websites for a more compatible view. - -:::note -To get an overview of Endpoint Policy Manager Browser Router and Internet Explorer 11's -Enterprise and Document Modes, please see -[http://www.endpointpolicymanager.com/video/endpointpolicymanager-browser-router-enterprise-and-document-modes.html](http://www.endpointpolicymanager.com/video/endpointpolicymanager-browser-router-block-web-sites-from-opening-in-all-browsers.html). -::: - - -:::note -To learn more about Internet Explorer 11 Enterprise and Document Modes, see the following -Microsoft websites: Enterprise Mode is at: -[Internet Explorer to Endpoint Policy Manager Browser Router Site lists](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/tipsandtricks/iesitelists.md) -and Document Modes is at: -[https://technet.microsoft.com/en-us/library/dn321432.aspx](http://www.endpointpolicymanager.com/video/endpointpolicymanager-using-pp-browser-router-on-citrix-or-rds-servers-with-published-browser-applications.html). -::: - - -:::warning -This Endpoint Policy Manager Browser Router method is meant to replace the Microsoft -method of creating Enterprise Mode site lists. Do not try to use Microsoft's list (explained in the -Microsoft URL above) along with Endpoint Policy Manager Browser Router's function. Only use Endpoint -Policy Manager Browser Router to perform this function. -::: - - -Using Endpoint Policy Manager Browser Router, you can require particular websites to use a specific -Internet Explorer Enterprise Mode or Document Mode. - -![about_policypak_browser_router_25](/images/endpointpolicymanager/browserrouter/internetexplorer/about_endpointpolicymanager_browser_router_25.webp) - -Internet Explorer 11's Enterprise Mode has two specifications: v1 and v2. Endpoint Policy Manager -Browser Router automatically detectsthe version of Internet Explorer installed on your endpoint -machines and write the Enterprise site list based on the correct specification. Note that **PORT** -is not supported in the Internet Explorer EM v1 specification, and as such, is ignored when v1 site -lists must be used. - -:::note -Site lists for v2 are automatically created and used when Windows 10 and Internet Explorer -11 (version 11.0.10586.\*) are detected. Site lists for v1 are used in all other circumstances. -::: - - -Note the checkbox labeled **Don't make a route**. If the user is already using Firefox or Chrome and -goes to this website, Internet Explorer will always open when **Don't make a route** is unchecked. -When it is checked, the user is free to use Firefox or Chrome on this website, and they will only -see the Internet Explorer Document Mode set when they specifically select Internet Explorer. This -gives you the ability to use Endpoint Policy Manager Browser Router to manage the Internet Explorer -Enterprise Mode site list without having to force users to specifically use Internet Explorer and -impose a route. - -You can easily see if Endpoint Policy Manager Browser Router and the Internet Explorer 11 Enterprise -Mode are working. There's an Internet Explorer 11 EM icon in the title bar next to the address bar -that demonstrates that EM is active. - -![about_policypak_browser_router_26](/images/endpointpolicymanager/browserrouter/internetexplorer/about_endpointpolicymanager_browser_router_26.webp) - -If you've chosen to use one of the Internet Explorer Document Modes, you might have a hard time -locating them if they are applying correctly since they are difficult to see. For instance, here -we've set a page to display in IE5 Document Mode using Endpoint Policy Manager Browser Router. - -![about_policypak_browser_router_27](/images/endpointpolicymanager/browserrouter/internetexplorer/about_endpointpolicymanager_browser_router_27.webp) - -When users visit the website at this point, Endpoint Policy Manager Browser Router correctly sets -the IE Document Mode accordingly. To see the DM, you need to press F12 within Internet Explorer 11 -for **Developer Tools**, and then click the Emulation tab. - -![about_policypak_browser_router_28](/images/endpointpolicymanager/browserrouter/internetexplorer/about_endpointpolicymanager_browser_router_28.webp) - -In this way, you can easily create routes for all webpages that need special rendering modes using -Endpoint Policy Manager Browser Router. diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/overview.md b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/overview.md deleted file mode 100644 index 5cbdcdfeb2..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/overview.md +++ /dev/null @@ -1,111 +0,0 @@ ---- -title: "Browser Router" -description: "Browser Router" -sidebar_position: 20 ---- - -# Browser Router - -:::note -Before reading this section, please ensure you have read -[Installation Quick Start](/docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/overviewinstall.md), which explain how to: -::: - - -- Install the Admin MSI on your GPMC machine -- Install the CSE on a test Windows machine -- Set up a computer in Trial mode or Licensed mode -- Set up a common OU structure - -Optionally, if you don't want to use Group Policy, read the sectionon **Advanced Concepts on Group -Policy and non-Group Policy methods** (MEMCM, KACE, and MDM service or Netwrix Endpoint Policy -Manager (formerly PolicyPak) Cloud), located -in[Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/uemtools.md). This information on -how to deploy your directives. - -:::note -Watch this video for an overview of Endpoint Policy Manager Browser Router: -[](http://www.endpointpolicymanager.com/video/endpointpolicymanager-browser-router-ensure-users-utilize-the-right-browser-for-the-right-website.html)[Ensure users utilize the RIGHT browser for the right website !](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/gettingstarted/rightbrowser.md). -::: - - -Let's say you wanted to apply the following routing policies: - -- www.microsoft.com is set to Internet Explorer. -- www.gpanswers.com is set to Firefox. -- \*.endpointpolicymanager.com is set to Edge. -- abc.endpointpolicymanager.com is set to Firefox via App-V. -- xyz.endpointpolicymanager.com is set to Chrome via ThinApp. -- All websites with \*xxx\* in the name are blocked; that is, a browser will not launch for them. - -With Endpoint Policy Manager Browser Router, you can apply all of the above policies and more. -Browser Router enables you to perform the following functions: - -- Assemble settings (policies) into collections. -- Set Item-Level Targeting on policies and collections. -- Deliver user-side policies to the Computer side without Group Policy Loopback mode. -- Create exact criteria for when specific websites should open, and in which browser. -- Export policies or collections as XML files (which can be used with Endpoint Policy Manager - Exporter and Endpoint Policy Manager Cloud). See - [Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/uemtools.md) for more details. -- Set custom messages when you have blocked a website. -- Dynamically set Internet Explorer 11 Enterprise Mode (IE 11 EM) and Document Modes site lists. -- Automatically write Internet Explorer 11 EM version 1 or version 2 site lists, based on the - machine type. -- Route all intranet traffic from Microsoft Edge to IE 11. -- Route all sites on Internet Explorer Site List from Edge to IE 11. - -If you would like to perform your own Quickstart with Endpoint Policy Manager Browser Router, it is -recommended that you have one endpoint (Windows 10) set up with the following browsers: - -- Internet Explorer 11 -- Firefox (latest) -- Chrome (latest) - -There are more advanced scenarios, but this will get you going quickly. - -There are a few basic ways to use Endpoint Policy Manager Browser Router. First, you can create one -or multiple Microsoft Group Policy Objects (GPOs) using Endpoint Policy Manager Browser Router. If -you use Group Policy as the delivery mechanism, that directive is deployed to client machines. -Alternatively, you can export the Endpoint Policy Manager Browser Router rules and deliver them via -the following methods: - -Microsoft Endpoint Manager (SCCM and/or Intune) - -- Systems management software -- Endpoint Policy Manager Cloud service - -The client machine with the Endpoint Policy Manager client-side extension (CSE) embraces the -directives and performs the work. - -:::note -If you use the Endpoint Policy Manager Cloud service, you can deliver Group Policy -settings over the Internet, even to non-domain-joined machines. -::: - - -:::note -You can also use Endpoint Policy Manager Browser Router with your Citrix or RDS servers. -See the following video for more information: -[Using PP Browser Router on Citrix or RDS servers with published browser applications](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/citrixvirtualapps/citrix.md). -::: - - -## Endpoint Policy Manager Browser Router Moving Parts - -You will need the following to get started with Endpoint Policy Manager Browser Router: - -- A management station. You must install the Endpoint Policy Manager Admin Console MSI on the - management station where you create GPOs. Once it's installed, you'll see the Endpoint Policy - Manager | Endpoint Policy Manager Browser Router node. -- The Endpoint Policy Manager CSE that runs on the client (target) machine. This is the same CSE for - all Endpoint Policy Manager products; there isn't anything separate to install. The Endpoint - Policy Manager CSE must be present in order to accept Endpoint Policy Manager Security Settings - Manager directives when using Microsoft Endpoint Manager (SCCM and Intune), KACE, similar - utilities, or Endpoint Policy Manager Cloud. -- Endpoints. Endpoints must be licensed for Endpoint Policy Manager Browser Router using one of the - licensing methods. -- Endpoint Policy Manager Exporter (optional). This is a free utility that lets you take exported - Group Policy and Endpoint Policy Manager XML files and wrap them into a "portable" MSI file for - deployment using Microsoft Endpoint Manager (SCCM and Intune) or your own systems management - software. diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/overview_1.md b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/overview_1.md deleted file mode 100644 index da911fe1a6..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/overview_1.md +++ /dev/null @@ -1,41 +0,0 @@ ---- -title: "Understanding Default Browser Policies" -description: "Understanding Default Browser Policies" -sidebar_position: 20 ---- - -# Understanding Default Browser Policies - -In the previous example, you used the **New Default Browser** policy to set the default browser to -Internet Explorer. In this way, Internet Explorer only would be used when users click on an external -link (e.g., from an email) and there is no other rule routing to a specific browser. Any of the -browsers can be the default, but only one can be chosen as the default. Additionally, there is a -special browser called **User Selectable**. Below you can see how to select the default browser. - -:::note -For an overview of the User Selectable option, see -[Endpoint Policy Manager Browser Router User-Selected Default](/docs/endpointpolicymanager/knowledgebase/browserrouter/videolearningcenter/gettingstarted/userselecteddefault.md). -::: - - -![about_policypak_browser_router_11](/images/endpointpolicymanager/browserrouter/defaultbrowser/about_endpointpolicymanager_browser_router_11.webp) - -The **User Selectable** option enables the user to specify their desired default browser as Internet -Explorer, Edge, Chrome, or Firefox. The Endpoint Policy Manager engine "learns" this setting at the -next Group Policy background update (or if GPupdate is manually invoked). This means there could be -a situation where the user changes their default browser, but then logs off before Group Policy -re-applies to capture their desired setting. If this is the case, Endpoint Policy Manager cannot -"learn" the user's desired defaults until the user changes the setting and Group Policy re-applies -it in the background. - -You might also want to specify a default browser one time and then drift. In other words, the user -is assigned a default browser the first time they open a URL but can then change the default browser -to one of their own choosing. In this case, we select the same settings as last time except we -choose to apply the rule only one time, as sown below - -![about_policypak_browser_router_12](/images/endpointpolicymanager/browserrouter/defaultbrowser/about_endpointpolicymanager_browser_router_12.webp) - -Users can then change the default browser to their own liking, even though their settings show that -the web browser is managed by their organization. - -![about_policypak_browser_router_13](/images/endpointpolicymanager/browserrouter/defaultbrowser/about_endpointpolicymanager_browser_router_13.webp) diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/_category_.json b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/_category_.json deleted file mode 100644 index 321946993b..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Java Enterprise Rules Manager", - "position": 30, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/gettingstarted.md b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/gettingstarted.md deleted file mode 100644 index 366bef07ba..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/gettingstarted.md +++ /dev/null @@ -1,125 +0,0 @@ ---- -title: "Quick Start" -description: "Quick Start" -sidebar_position: 20 ---- - -# Quick Start - -:::note -Watch this video for an overview of Java Rules Manager: See -[Use Endpoint Policy Manager Cloud to choose which version of Java for what website](/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/methods/cloud.md) -Netwrix Endpoint Policy Manager (formerly PolicyPak). -::: - - -Endpoint Policy Manager Java Rules Manager editor is within the Endpoint Policy Manager node. -Endpoint Policy Manager Java Rules Manager enables you to create a new Endpoint Policy Manager Java -Rules Manager policy or collection. - -:::note -You will only see the Java Rules Manager node when you have the latest Endpoint Policy -Manager Admin Console MSI installed on your management station. -::: - - -![quickstart_policypak_java](/images/endpointpolicymanager/javaenterpriserules/quickstart_endpointpolicymanager_java.webp) - -Endpoint Policy Manager Java Rules Manager rules can only be created on the Computer side. If you -attempt to use the user-side configuration node, you will receive a message explaining that you need -to use the Computer side. This is because Endpoint Policy Manager Java Rules Manager rules affect -the system and all users on the machine. In other words, all users must honor the Endpoint Policy -Manager Java Rules Manager rule set, even though it can be filtered by using Item-Level Targeting -(explained later). - -Endpoint Policy Manager Java Rules Manager policies can use collections. If you want to keep things -organized, you can create a collectioni Endpoint Policy Manager and then put Java Rules policies (or -other collections) inside the collection. - -![quickstart_policypak_java_1](/images/endpointpolicymanager/javaenterpriserules/quickstart_endpointpolicymanager_java_1.webp) - -![quickstart_policypak_java_2](/images/endpointpolicymanager/javaenterpriserules/quickstart_endpointpolicymanager_java_2.webp) - -Endpoint Policy Manager Java Rules Manager has a precedence order. This happens if you decide to -have multiple policies, collections, and Group Policy Objects (GPOs), or if you choose to use -something other than Group Policy to deliver settings. - -**Step 1 –** For the Quickstart, we recommend creating a collection on the Computer side. Within -that collection, create a new Endpoint Policy Manager Java Rules Manager policy, such as the one -shown below. In this example, we are making a rule for [https://java.com ](https://java.com)by using -Java 7 U 51. (Note that this is https, notjust http). - -![quickstart_policypak_java_3](/images/endpointpolicymanager/javaenterpriserules/quickstart_endpointpolicymanager_java_3.webp) - -**Step 2 –** Once you click **OK** you will receive an entry similar to the one shown below. - -![quickstart_policypak_java_4](/images/endpointpolicymanager/javaenterpriserules/quickstart_endpointpolicymanager_java_4.webp) - -**Step 3 –** If you would like to follow along with this Quickstart, create two more Endpoint Policy -Manager Java Rules Manager policies in the same collection. The next one will make a rule so that -[http://javatester.org ](http://javatester.org)will run with Java 8 U 25. (Note that this URL is -http, nothttps). - -![quickstart_policypak_java_5](/images/endpointpolicymanager/javaenterpriserules/quickstart_endpointpolicymanager_java_5.webp) - -**Step 4 –** Click **OK** to save the entry.. - -**Step 5 –** Create another policy that will block `https://*.nasa.gov/`.Note that this URL is -https. - -![quickstart_policypak_java_6](/images/endpointpolicymanager/javaenterpriserules/quickstart_endpointpolicymanager_java_6.webp) - -**Step 6 –** When complete, your entries will look like this:. - -![quickstart_policypak_java_7](/images/endpointpolicymanager/javaenterpriserules/quickstart_endpointpolicymanager_java_7.webp) - -Here is what each column in the above figure means: - -- Policy Name — This is the name you gave the policy. Default browser is always named Default - Browser. -- Manage Type — The method to perform the mapping of the Java applet to the version of Java you want - to use (explained in more detail later). -- Rule — In this example, this is the location/URL you chose to manage. -- Enabled (True/False) — A policy entry can be enabled, which means it will go to work. If you need - to temporarily stop a policy entry from applying, you can disable it (set it to False). -- Item-Level Targeting (No/Yes) — We will describe this column later on in the section - [Using Item-Level Targeting with Collections and Policies](/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/usage/itemleveltargeting.md). -- Comment — Any entry can have a comment option, which is used to explain why you made the decision. - -**Step 7 –** On the endpoint, reboot the computer or run GPupdate so the GPO with the policies that -affect the computer will apply. - -:::note -Logging in as a test user will not work in this case since these Endpoint Policy Manager -entries are on the Computer side and are only processed when the computer is updated (at reboot or -GPupdate). -::: - - -**Step 8 –** Now try out Endpoint Policy Manager Java Rules Manager by doing the following: - -- Open Internet Explorer and visit [java.com](http://www.java.com/). Next, click **Do I have Java?** - Instead of showing the latest version of Java installed on your machine, you should see that you - have Java 7 U 51. -- Open Firefox and visit [www.javatester.org](http://www.javatester.org/). Then click **Test this - version of Java**. You should see Java 1.8.0_25, that is, Java 8 U 25. - -![quickstart_policypak_java_8](/images/endpointpolicymanager/javaenterpriserules/quickstart_endpointpolicymanager_java_8.webp) - -**Step 9 –** On either browser, visit -[https://atcsim.arc.nasa.gov/version/index.html](https://atcsim.arc.nasa.gov/version/index.html). -When you visit the NASA website, you will receive a prompt warning you that the web certificate is -out of date and will be received (which is not related to Java). Continue to run the applet. The -result is shown below. - -![quickstart_policypak_java_9](/images/endpointpolicymanager/javaenterpriserules/quickstart_endpointpolicymanager_java_9.webp) - -**Step 10 –** Click **OK**. Next, click the **Error: Click for details** message. When you do this, -another message will pop-up. - -![quickstart_policypak_java_10](/images/endpointpolicymanager/javaenterpriserules/quickstart_endpointpolicymanager_java_10.webp) - -This ends the Endpoint Policy Manager Java Rules Manager Quickstart, which demonstrated the power of -Endpoint Policy Manager Java Enterprise Rules Manager in the fastest amount of time. Note that -prompts for various Java-related items might be received during your Quickstart. To overcome this, -please see section on [Overcoming Java Prompts](/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/prompts/overview.md). diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/javaenterpriserules/_category_.json b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/javaenterpriserules/_category_.json deleted file mode 100644 index 5dfef96d71..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/javaenterpriserules/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Troubleshooting", - "position": 40, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/overview.md b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/overview.md deleted file mode 100644 index 1e46f42d6e..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/overview.md +++ /dev/null @@ -1,94 +0,0 @@ ---- -title: "Java Enterprise Rules Manager" -description: "Java Enterprise Rules Manager" -sidebar_position: 30 ---- - -# Java Enterprise Rules Manager - -:::note -Before reading this section, please ensure you have read Book 2: -[Installation Quick Start](/docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/overviewinstall.md), which will help you -learn to do the following: -::: - - -- Install the Admin MSI on your GPMC machine -- Install the CSE on a test Windows machine -- Set up a computer in Trial mode or Licensed mode -- Set up a common OU structure - -Optionally, if you don't want to use Group Policy, read the section in Appendix A: -[Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/uemtools.md) to deploy your -directives. - -The goals of Netwrix Endpoint Policy Manager (formerly PolicyPak) Java Rules Manager are as follows: - -- Dictate specific versions of Java that should be utilized by specific Java applets (usually housed - within specific webpages). -- Reduce or eliminate prompts to end users about Java. -- Continue to run unknown or unnamed Java applets with the most secure version of Java. - -Java Rules Manager enables you to map the version of Java you want to use in individual -circumstances. It is the fastest way to implement Oracle's Java Deployment Rule Set feature (which -will be explained later). PolicyPak is not reinventing the wheel or tricking Java. Instead, it works -alongside Oracle's sanctioned method for the mapping of Java versions to Java applets. - -:::note -See this video -[Use Endpoint Policy Manager Cloud to choose which version of Java for what website](/docs/endpointpolicymanager/knowledgebase/javaenterpriserules/videolearningcenter/methods/cloud.md) for -an overview of Endpoint Policy Manager Java Rules Manager. -::: - - -For instance, you might want to ensure that the following policies are running on your machine: - -- Use Java 7 U 51 for when end users go to www.internal.com/app1. -- Use Java 8 U 25 for when end users go to www.internal.com/app2. -- Block specific Java applets from running in specific websites. -- Use the latest version of Java for all other sites and circumstances. - -PolicyPak Java Rules Manager enables you to perform the following functions: - -- Assemble settings (policies) into collections. -- Set Item-Level Targeting on policies and collections. -- Deliver policies to the Computer side (without Group Policy Loopback mode). -- Create exact criteria for when specific Java versions should open in a browser. -- Export policies or collections as XML files for use with PolicyPak Exporter and PolicyPak Cloud. - See [Exporting Collections](/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/usage/exportcollections.md) for additional information. -- Set custom messages when blocking a Java applet. - -To use the Quickstart for PolicyPak Java Rules Manager, we recommend you have one endpoint (Windows -7 or later) configured with the following browsers and Java versions: - -- Internet Explorer 11 -- Firefox (latest ESR version still supports Java) -- Chrome (latest) -- Java 7 (our examples will use Java 7 U 51) -- Java 8 (our examples will use Java 8 U 25) -- The latest version of Java (Java 8 U 111 as of this manual's publication) - -It is recommended that you test the endpoint (Windows 7 or later) with all these versions of Java, -as well as Internet Explorer, Firefox, and Chrome. - -![about_policypak_java_rules](/images/endpointpolicymanager/javaenterpriserules/about_endpointpolicymanager_java_rules.webp) - -Even though there are more advanced scenarios, this will get you going quickly. - -There are a few basic ways you can use PolicyPak Java Rules Manager. - -- First, create a Microsoft Group Policy Object (GPO) using PolicyPak Java Rules Manager. If you use - Group Policy as the delivery mechanism, then that directive is deployed to client machines. -- Alternatively, export the PolicyPak Java Rules Manager rules and deliver them via the following - applications: - - - Microsoft Endpoint Manager (SCCM and Intune) - - Your own systems management software - - PolicyPak Cloud service - - The client machine with the PolicyPak client-side extension (CSE) - -:::note -If you use the PolicyPak Cloud service, you can deliver Group Policy settings even to -non-domain-joined machines over the Internet. - -::: diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/prompts/_category_.json b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/prompts/_category_.json deleted file mode 100644 index ba60bf1dab..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/prompts/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Overcoming Java Prompts", - "position": 50, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/prompts/internetexplorer/_category_.json b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/prompts/internetexplorer/_category_.json deleted file mode 100644 index 6c75c81f0c..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/prompts/internetexplorer/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Type 3: Java Messages for Internet Explorer", - "position": 30, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/usage/_category_.json b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/usage/_category_.json deleted file mode 100644 index 547efce216..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/usage/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Using Java Rules Manager", - "position": 30, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "usage" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/securitysettings/_category_.json b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/securitysettings/_category_.json deleted file mode 100644 index 2bdb3200ea..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/securitysettings/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Security Settings Manager", - "position": 40, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/securitysettings/overview.md b/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/securitysettings/overview.md deleted file mode 100644 index 7ee55a233f..0000000000 --- a/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/securitysettings/overview.md +++ /dev/null @@ -1,61 +0,0 @@ ---- -title: "Security Settings Manager" -description: "Security Settings Manager" -sidebar_position: 40 ---- - -# Security Settings Manager - -:::note -Before reading this section, please ensure you have read Book 2: -[Installation Quick Start](/docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/overviewinstall.md), which will help you -learn to do the following: -::: - - -- Install the Admin MSI on your GPMC machine -- Install the CSE on a test Windows machine -- Set up a computer in Trial mode or Licensed mode -- Set up a common OU structure - -Optionally, if you don't want to use Group Policy, read the section in Appendix A: -[Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/uemtools.md) to deploy your -directives. - -Netwrix Endpoint Policy Manager (formerly PolicyPak) Security Settings Manager enables -administrators to harness the power of Microsoft's existing security settings and deliver those -settings without Group Policy (via Microsoft Endpoint Manager [SCCM], KACE, or Endpoint Policy -Manager Cloud). The supported Microsoft security settings can be seen below.  Red lines indicate -these items are not supported by Endpoint Policy Manager. - -![about_policypak_security_settings](/images/endpointpolicymanager/securitysettings/about_endpointpolicymanager_security_settings.webp) - -:::note -The following items are NOT supported by Endpoint Policy Manager Security Settings -Manager: -::: - - -- IP Security -- Wired network (IEEE 802.3) policies -- Wireless network (IEEE 802.11) policies -- Advanced audit policies - -## Moving Parts - -Endpoint Policy Manager Security Settings Manager has the following components: - -- A management station — To start, create a standard Group Policy Object (GPO), editing it with the - security settings you want (**Computer Configuration** **>** **Policies | Security**). Then use - the **Endpoint Policy Manager** **>** **Endpoint Policy Manager Security Settings Manager** node. -- The Endpoint Policy Manager client-side extension (CSE) — This runs on the client (target) - machine. It is the same CSE for all Endpoint Policy Manager products. There isn't anything - separate to install, and the Endpoint Policy Manager CSE must be present in order to accept - Endpoint Policy Manager Security Settings Manager directives when using Microsoft Endpoint Manager - (SCCM and Intune), KACE, similar utilities, or Endpoint Policy Manager Cloud. -- Endpoints — Endpoints must be licensed for Endpoint Policy Manager Security Settings Manager using - one of the licensing methods. -- Endpoint Policy Manager Exporter (optional) — This is a free utility that lets you take Endpoint - Policy Manager Admin Templates Manager and other Endpoint Policy Manager products' XML files and - wrap them into a portable MSI file for deployment using Microsoft Endpoint Manager (SCCM and - Intune), a mobile device management service, or your own systems management software. diff --git a/docs/endpointpolicymanager/manuals/desktopautomationand/_category_.json b/docs/endpointpolicymanager/manuals/desktopautomationand/_category_.json deleted file mode 100644 index ea14dc408c..0000000000 --- a/docs/endpointpolicymanager/manuals/desktopautomationand/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Desktop Automation And Connectivity Pak", - "position": 90, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/desktopautomationand/networksecuritymanager.md b/docs/endpointpolicymanager/manuals/desktopautomationand/networksecuritymanager.md deleted file mode 100644 index a5032b2704..0000000000 --- a/docs/endpointpolicymanager/manuals/desktopautomationand/networksecuritymanager.md +++ /dev/null @@ -1,152 +0,0 @@ ---- -title: "Endpoint Policy Manager Network Security Manager" -description: "Endpoint Policy Manager Network Security Manager" -sidebar_position: 30 ---- - -# Endpoint Policy Manager Network Security Manager - -Network Security Manager enables you to restrict processes to communicate with specific IP addresses -or DNS addresses. This increases the security of applications (or browsers) so end-users (or -anonymous users) on the endpoints cannot use programs to connect to unwanted network addresses. - -Some examples of use are: - -- Ensuring your Quickbooks client application only connects to your Quickbooks server (and not some - rogue server) -- Ensuring specific browsers can only communicate with specifically named websites. -- Ensuring a networking app, like Telnet or WinSCP or FileZilla can only communicate and transfer - files to specifically named servers. - -## Getting started with Endpoint Policy Manager Network Security Manager - -:::info -For an overview of this section, see this video: See -[Endpoint Policy Manager Network Security Manager - The Basics](/docs/endpointpolicymanager/knowledgebase/networksecuritymanager/videolearningcenter/gettingstarted/basics.md) -topic for additional information. -::: - - -Pick an application you wish to restrict, like a browser (such as Edge, Firefox, PaleMoon, etc) or a -networking application (like Telnet, WinSCP, etc.). Then pick the destinations you wish for that -application to be restricted to. - -In this example, we'll restrict the Edge browser to only be allowed to communicate with -[www.Netwrix.com](http://www.netwrix.com/). All other communication will be rejected. - -Start out by creating a GPO and linking it over to where your computer objects are. - -Then use Computer Configuration | Netwrix Endpoint Policy Manager | Desktop Automation Pak | Network -Security Manager. - -### Creating a Global Settings Policy - -Your first stop is to create a **New Global settings policy** like what's seen here. - -![nsm01](/images/endpointpolicymanager/scriptstriggers/nsm01.webp) - -Once selected you can see your configurable options for the machines. - -![nsm02](/images/endpointpolicymanager/scriptstriggers/nsm02.webp) - -- Enable Network Security Manager – This is the master ON switch for the feature. -- Show Management Notifications – You can choose to show if the processes are being managed by - Endpoint Policy Manager Network Security Manager (or not) -- Notification message should close in X seconds – Provides a countdown in seconds before the - message is removed. -- Disable recurring notifications after X impressions – Useful to set so the user can get the idea - that there is control; but eventually you can tamp down the number of pop-ups. -- Text Customization (Window Title, Notification Title, Customized Message) – Various settings to - configure the dialog - -### Creating a Process Matching Policy - -Next you'll want to create a process matching policy. Again, in our examples, we'll match on -Microsoft Edge. - -Create a New Policy like what's seen here. - -![nsm03](/images/endpointpolicymanager/scriptstriggers/nsm03.webp) - -Next you'll want to match a specific application. You can do this via Simple or Combo rules. This -example will use a Simple rule. - -:::info -For details about Simple and Combo rules, refer to the Endpoint Policy -Manager Least Privilege Manager Manual (as they won't be repeated here). -::: - - -Specify the location for Microsoft Edge via Path rule which is -`C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe` - -![nsm04](/images/endpointpolicymanager/scriptstriggers/nsm04.webp) - -Then in the **Add Connections Conditions** dialog, specify the following values to Allow Any -activity to www.Netwrix.com by Domain Name. - -![nsm05](/images/endpointpolicymanager/scriptstriggers/nsm05.webp) - -Then click **Add** and make policy #2 a Block policy which blocks everything else. - -![nsm06](/images/endpointpolicymanager/scriptstriggers/nsm06.webp) - -Results should look like this. - -![nsm07](/images/endpointpolicymanager/scriptstriggers/nsm07.webp) - -Click **Next** to continue. Accept the defaults on the final Wizard page and click **Finish**. - -![nsm08](/images/endpointpolicymanager/scriptstriggers/nsm08.webp) - -### Testing your Policy Out - -On your endpoint which has the Endpoint Policy Manager CSE installed and licensed, run GPupdate or -reboot the machine to acquire the policies. - -The results will be that when Edge is launched, end users cannot go to any network location, like -Microsoft.com, but are restricted to the specific network location you specified, www.Netwrix.com. - -![nsm09](/images/endpointpolicymanager/scriptstriggers/nsm09.webp) - -## Auditing Events - -:::info -See the -[Endpoint Policy Manager Network Security Manager - Auditing Events](/docs/endpointpolicymanager/knowledgebase/networksecuritymanager/videolearningcenter/gettingstarted/auditingevents.md) -topic for additional information. -::: - - -Auditing Events can be useful if you want to determine if your rules are working. Each rule may be -individually enabled like what's seen here. - -![nsm10](/images/endpointpolicymanager/scriptstriggers/nsm10.webp) - -In this example I'll have both rules set to Log. - -![nsm11](/images/endpointpolicymanager/scriptstriggers/nsm11.webp) - -The results can be pretty noisy depending on the application. In this case whenever Edge is run you -will get a myriad of Blocked events like what's seen here. - -![nsm12](/images/endpointpolicymanager/scriptstriggers/nsm12.webp) - -You may wish to audit for blocks for a while then change gears to audit only for successes later to -reduce the amount of noise. - -## Additional Topics & References - -Because Network Security Manager uses the same basic UI as Endpoint Policy Manager Least Privilege -Manager, you can learn more about Simple rules here: - -- [Elevating Executables](/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/executables.md) -- [Creating and Using Executable Combo Rules](/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/bestpractices/executablecombo.md) - -You can learn more about the following additional Endpoint Policy Manager Network Security manager -topics via our How-To videos: - -- Understanding Applications & Ports: - [Endpoint Policy Manager Network Security Manager - Applications and Ports](/docs/endpointpolicymanager/knowledgebase/networksecuritymanager/videolearningcenter/gettingstarted/applicationsports.md) -- Deeper Dive into Customizations & Notifications: - [Endpoint Policy Manager Network Security Manager - Global settings](/docs/endpointpolicymanager/knowledgebase/networksecuritymanager/videolearningcenter/gettingstarted/globalsettings.md) diff --git a/docs/endpointpolicymanager/manuals/desktopautomationand/remotedesktopprotoco/_category_.json b/docs/endpointpolicymanager/manuals/desktopautomationand/remotedesktopprotoco/_category_.json deleted file mode 100644 index 90ab9550c6..0000000000 --- a/docs/endpointpolicymanager/manuals/desktopautomationand/remotedesktopprotoco/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Remote Desktop Protocol Manager", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/desktopautomationand/remotedesktopprotoco/gettingtoknowrdpmana/_category_.json b/docs/endpointpolicymanager/manuals/desktopautomationand/remotedesktopprotoco/gettingtoknowrdpmana/_category_.json deleted file mode 100644 index 09885dea13..0000000000 --- a/docs/endpointpolicymanager/manuals/desktopautomationand/remotedesktopprotoco/gettingtoknowrdpmana/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Getting To Know RDP Manager", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/desktopautomationand/remotedesktopprotoco/itemleveltargeting/_category_.json b/docs/endpointpolicymanager/manuals/desktopautomationand/remotedesktopprotoco/itemleveltargeting/_category_.json deleted file mode 100644 index 819a2206d6..0000000000 --- a/docs/endpointpolicymanager/manuals/desktopautomationand/remotedesktopprotoco/itemleveltargeting/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Using Item-Level Targeting with Collections and Policies", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/desktopautomationand/remotedesktopprotoco/itemleveltargeting/overview.md b/docs/endpointpolicymanager/manuals/desktopautomationand/remotedesktopprotoco/itemleveltargeting/overview.md deleted file mode 100644 index 1cd191daa7..0000000000 --- a/docs/endpointpolicymanager/manuals/desktopautomationand/remotedesktopprotoco/itemleveltargeting/overview.md +++ /dev/null @@ -1,54 +0,0 @@ ---- -title: "Using Item-Level Targeting with Collections and Policies" -description: "Using Item-Level Targeting with Collections and Policies" -sidebar_position: 20 ---- - -# Using Item-Level Targeting with Collections and Policies - -Item-Level Targeting is used in Microsoft Group Policy Preferences and other areas of Netwrix -Endpoint Policy Manager (formerly PolicyPak) to target or filter where specific items will apply. -With Endpoint Policy Manager RDP Manager, Item-Level Targeting can be placed on collections, as well -as policies within collections. - -A collection enables you to group together Endpoint Policy Manager RDP Manager policies so they can -act together. For instance, you might create a collection for only East Sales users and another for -HR Users. - -![using_item_level_targeting](/images/endpointpolicymanager/remotedesktopprotocol/itemleveltargeting/using_item_level_targeting.webp) - -Below you can see the two collections we have created which can hold other collections or policies. -You can also see how you can apply Item-Level Targeting for a collection. - -![using_item_level_targeting_1](/images/endpointpolicymanager/remotedesktopprotocol/itemleveltargeting/using_item_level_targeting_1.webp) - -To change the Item-Level Targeting, right-click any Endpoint Policy Manager RDP Manager policy, and -select **Edit Item Level Targeting**. - -![using_item_level_targeting_2](/images/endpointpolicymanager/remotedesktopprotocol/itemleveltargeting/using_item_level_targeting_2.webp) - -The Edit Item Level Targeting menu item brings up the Targeting Editor. You can select any -combination of characteristics you want to test for. Administrators familiar with Group Policy -Preferences' Item-Level Targeting will be at home in this interface, as it is functionally -equivalent. - -You can apply one or more targeting items to a policy, which enables targeting items to be joined -logically. You can also add targeting collections, which group together targeting items in much the -same way parentheses are used in an equation. In this way, you can create a complex determination -about where a policy will be applied. Collections may be set to And, Or, Is, or Is Not. - -When targeting policies and collections for Endpoint Policy Manager RDP Manager policies, it is a -good idea to target portable computers and mobile user security groups. You can also require that -users not be on the corporate LAN as well. - -![using_item_level_targeting_3](/images/endpointpolicymanager/remotedesktopprotocol/itemleveltargeting/using_item_level_targeting_3.webp) - -In this example, the Pak would only apply to Windows 10 machines when the machine is portable and -not on the corporate LAN subnet, and the user is in the FABRIKAM\Traveling Sales Users group. - -When using Item-level Targeting and conditional settings, you can check the **Remove RDP file when -policy no longer applies** option to delete the RDP file when the policy no longer applies. For -example, using the example below, the policy would no longer apply whenever the computer obtains an -address from the corporate LAN. - -![using_item_level_targeting_4](/images/endpointpolicymanager/remotedesktopprotocol/itemleveltargeting/using_item_level_targeting_4.webp) diff --git a/docs/endpointpolicymanager/manuals/desktopautomationand/remotedesktopprotoco/overview.md b/docs/endpointpolicymanager/manuals/desktopautomationand/remotedesktopprotoco/overview.md deleted file mode 100644 index ab684d77e1..0000000000 --- a/docs/endpointpolicymanager/manuals/desktopautomationand/remotedesktopprotoco/overview.md +++ /dev/null @@ -1,23 +0,0 @@ ---- -title: "Remote Desktop Protocol Manager" -description: "Remote Desktop Protocol Manager" -sidebar_position: 10 ---- - -# Remote Desktop Protocol Manager - -Netwrix Endpoint Policy Manager (formerly PolicyPak) Remote Desktop Protocol (RDP) Manager enables -you to perform the following operations in Windows 10 in order to optimize remote work and VDI -scenarios: - -- Manage RDP connections using an intuitive GUI just like RDP Connection Manager -- Create, replace, update, and delete RDP files on user desktops -- Configure and deliver the complete gamut of RDP settings and keep them up to date -- Specify which RDP files should go on which machines based on conditional settings - -:::note -See -[Create and update .RDP files for end-users for Remote Work and VDI scenarios](/docs/endpointpolicymanager/knowledgebase/endpointpolicyrdp/videolearningcenter/remoteworkandvdi/vdiscenarios.md) -for an overview of Endpoint Policy Manager Remote Desktop Protocol Manager - -::: diff --git a/docs/endpointpolicymanager/manuals/desktopautomationand/scriptstriggers/_category_.json b/docs/endpointpolicymanager/manuals/desktopautomationand/scriptstriggers/_category_.json deleted file mode 100644 index ca4fda6b33..0000000000 --- a/docs/endpointpolicymanager/manuals/desktopautomationand/scriptstriggers/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Scripts & Triggers Manager", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/desktopautomationand/scriptstriggers/gettoknow/_category_.json b/docs/endpointpolicymanager/manuals/desktopautomationand/scriptstriggers/gettoknow/_category_.json deleted file mode 100644 index b109235bb3..0000000000 --- a/docs/endpointpolicymanager/manuals/desktopautomationand/scriptstriggers/gettoknow/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Getting to Know Scripts & Triggers Manager", - "position": 30, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/desktopautomationand/scriptstriggers/itemleveltargeting/_category_.json b/docs/endpointpolicymanager/manuals/desktopautomationand/scriptstriggers/itemleveltargeting/_category_.json deleted file mode 100644 index dd0b8e0730..0000000000 --- a/docs/endpointpolicymanager/manuals/desktopautomationand/scriptstriggers/itemleveltargeting/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Using Item-Level Targeting with Collections and Policies", - "position": 40, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/desktopautomationand/scriptstriggers/itemleveltargeting/exportcollections.md b/docs/endpointpolicymanager/manuals/desktopautomationand/scriptstriggers/itemleveltargeting/exportcollections.md deleted file mode 100644 index 2de81d054c..0000000000 --- a/docs/endpointpolicymanager/manuals/desktopautomationand/scriptstriggers/itemleveltargeting/exportcollections.md +++ /dev/null @@ -1,64 +0,0 @@ ---- -title: "Exporting Collections" -description: "Exporting Collections" -sidebar_position: 20 ---- - -# Exporting Collections - -Appendix A: [Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/uemtools.md) explains -how to use the Endpoint Policy Manager Exporter to wrap up any Endpoint Policy Manager directive and -deliver it using an MDM service such as Microsoft Endpoint Manager (SCCM and Intune), KACE, and so -on, as well as via Endpoint Policy Manager Cloud. - -:::note -For a video demonstrating the use of Endpoint Policy Manager scripts with Endpoint Policy -Manager Cloud and an MDM service see -[Endpoint Policy ManagerScripts .. Deploy Software via VPN or with Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/withcloud/cloud.md) -and -[Endpoint Policy Manager Scripts and YOUR MDM service: Un-real power](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/methods/mdm.md) -::: - - -Remember that Endpoint Policy Manager Scripts & Triggers Manager policies can be created and -exported on the User or Computer side. For instance, in Figure 30, you can see an export from the -User side. - -![using_item_level_targeting_6](/images/endpointpolicymanager/scriptstriggers/itemleveltargeting/using_item_level_targeting_6.webp) - -Figure 30. Exporting a policy from the User side. - -In Figure 31, you can see an export of a Endpoint Policy Manager Scripts & Triggers Manager XML file -from the Computer side. - -![using_item_level_targeting_7](/images/endpointpolicymanager/scriptstriggers/itemleveltargeting/using_item_level_targeting_7.webp) - -Figure 31. Exporting a collection from the Computer side. - -Here are some helpful tips to decide which side to use: - -- When you export a user-side policy, and deploy it using Endpoint Policy Manager Cloud or MDM, it - will apply to every user on the machine (like switched mode). -- When you export a computer-side policy that affects the system, and deploy it using Endpoint - Policy Manager Cloud or MDM, it will apply to the computer as system. -- When you export a computer-side policy that affect all users on the machine, and deploy it using - Endpoint Policy Manager Cloud or MDM, it will apply to every user on the machine (like switched - mode). - -To export a policy for later use with Endpoint Policy Manager Exporter or Endpoint Policy Manager -Cloud, right-click the collection or the policy and select "Export as XML," as demonstrated in -Figure 32. - -:::note -For a video showing how to export policies and use Endpoint Policy Manager Exporter, watch -[Deploying Endpoint Policy Managerdirectives without Group Policy (Endpoint Policy Manager Exporter Utility)](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/exportingtips/exporterutility.md). -::: - - -![using_item_level_targeting_8](/images/endpointpolicymanager/scriptstriggers/itemleveltargeting/using_item_level_targeting_8.webp) - -Figure 32. Choosing this option will allow the user to export the policy for later use. - -Note that exported collections or policies maintain any Item-Level Targeting set within them. If -you've used items that represent Group Membership in Active Directory, then those items will only -function when the machine is domain-joined. diff --git a/docs/endpointpolicymanager/manuals/desktopautomationand/scriptstriggers/overview.md b/docs/endpointpolicymanager/manuals/desktopautomationand/scriptstriggers/overview.md deleted file mode 100644 index f00ef5ff25..0000000000 --- a/docs/endpointpolicymanager/manuals/desktopautomationand/scriptstriggers/overview.md +++ /dev/null @@ -1,72 +0,0 @@ ---- -title: "Scripts & Triggers Manager" -description: "Scripts & Triggers Manager" -sidebar_position: 20 ---- - -# Scripts & Triggers Manager - -:::note -Before reading this section, please ensure you have read Book 2: -[Installation Quick Start](/docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/overviewinstall.md), which will help you -learn to do the following: -::: - - -- Install the Admin MSI on your GPMC machine -- Install the CSE on a test Windows machine -- Set up a computer in Trial mode or Licensed mode -- Set up a common OU structure - -Optionally, if you don't want to use Group Policy, read the section in Appendix A: -[Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/uemtools.md) to deploy your -directives. - -Netwrix Endpoint Policy Manager (formerly PolicyPak) Scripts & Triggers Manager enables you to -perform the following operations on Windows 10: - -- Deliver scripts of most usual types (Batch, Powershell, VB and JavaScript) -- Deliver scripts to both User and Computer sides -- Deliver an "On" script when conditions are true, and an "Off" script when conditions are false. - -:::note -Watch this video for an overview of Endpoint Policy Manager Scripts & Triggers Manager: -[Use with on-prem Group Policy](/docs/endpointpolicymanager/knowledgebase/scriptstriggers/videolearningcenter/gettingstarted/onpremise.md) -::: - - -The basic way to use Scripts & Triggers Manager is as follows: - -- Create a rule to express which file extensions should launch which applications. -- Export the Scripts & Triggers Manager rules and deliver them using: - - - Microsoft Endpoint Manager (SCCM and Intune) - - Your own systems management software - - A mobile device management (MDM) service - - Endpoint Policy Manager Cloud service - -- Allow the client machine with the Endpoint Policy Manager client-side extension (CSE) to embrace - the directives and perform the work. - -:::note -If you use the Endpoint Policy Manager Cloud service, you can deliver Group Policy -settings even to non-domain-joined machines over the Internet. -::: - - -## Moving Parts - -- A management station. The Endpoint Policy Manager Admin Console MSI must be installed on the - management station where you create group policy objects (GPOs). Once it's installed, you'll see - the Endpoint Policy Manager | Endpoint Policy Manager Scripts & Triggers Manager node. -- The Endpoint Policy Manager CSE. This runs on the client (target) machine and is the same CSE for - all Endpoint Policy Manager products. There isn't anything separate to install, and the Endpoint - Policy Manager CSE must be present in order to accept Endpoint Policy Manager Scripts & Triggers - Manager directives via Group Policy, or when using Microsoft Endpoint Manager (SCCM and Intune), - KACE, MDM, or similar utilities. -- Endpoints. In order to use these, they must be licensed for Endpoint Policy Manager Scripts & - Triggers Manager using one of the licensing methods. -- Endpoint Policy Manager Exporter (optional). A free utility that lets you take Endpoint Policy - Manager Scripts & Triggers Manager and our other products' XML files and wrap them into a - "portable" MSI file for deployment using Microsoft Endpoint Manager (SCCM and Intune), an MDM - service, or your own systems management software. diff --git a/docs/endpointpolicymanager/manuals/devicemanagementpak/_category_.json b/docs/endpointpolicymanager/manuals/devicemanagementpak/_category_.json deleted file mode 100644 index 870415f45f..0000000000 --- a/docs/endpointpolicymanager/manuals/devicemanagementpak/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Device Management Pak", - "position": 30, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/devicemanagementpak/devicemanager/_category_.json b/docs/endpointpolicymanager/manuals/devicemanagementpak/devicemanager/_category_.json deleted file mode 100644 index 658b37927f..0000000000 --- a/docs/endpointpolicymanager/manuals/devicemanagementpak/devicemanager/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Device Manager", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/devicemanagementpak/devicemanager/overview.md b/docs/endpointpolicymanager/manuals/devicemanagementpak/devicemanager/overview.md deleted file mode 100644 index 7f6edf86a0..0000000000 --- a/docs/endpointpolicymanager/manuals/devicemanagementpak/devicemanager/overview.md +++ /dev/null @@ -1,178 +0,0 @@ ---- -title: "Device Manager" -description: "Device Manager" -sidebar_position: 10 ---- - -# Device Manager - -This manual is designed to be both an overview of what you can do with Endpoint Policy Manager -Device Manager and a Quickstart guide for getting up and running quickly. - -:::note -You may ignore the standard or complete designations in the Endpoint Policy Manager Device -Manager UI. Typically, Endpoint Policy Manager is sold in Enterprise or SaaS editions and in those -configurations you get complete (meaning all the features). -::: - - -Before reading this section, please ensure you have read Book 2: Installation Quick Start, which -will help you learn to do the following: - -- Install the Admin MSI on your GPMC machine -- Install the CSE on a test Windows machine -- Set up a computer in Trial mode or Licensed mode -- Set up a common OU structure - -Optionally, this manual demonstrates how to use on-prem Active Directory and Group Policy to deploy -Endpoint Policy Manager Device Manager directives. If you don't want to use Group Policy, see the -[MDM & UEM Tools](/docs/endpointpolicymanager/manuals/introductionandquick/mdm/overview.md) topic to deploy directives for additional information. - -:::note -For an overview of Endpoint Policy Manager Device Manager see the -[Video Learning Center](/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/videolearningcenter.md) topic for additional information. -::: - - -Endpoint Policy Manager Device Manager will manage USB and other removable media devices like -CD-ROMs, DVD ROMs, and phones which plug in and have storage when attached to Windows. - -For an overview of managing USB and other removeable media devices using Endpoint Policy Manager -Device Manager, see the -[Instantly Put the smackdown on USB sticks and CD-ROMs](/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/gettingstarted/usbdrive.md) topic for -additional information. - -The basic way to use Endpoint Policy Manager Device Manager is as follows: - -- Block end-users from accessing removable devices -- Create a rule to specify which removable devices a user would need access rights to -- Use On-Prem Group Policy to accept the Endpoint Policy Manager Device Manager policies created - -Alternatively, export the Endpoint Policy Manager Device Manger rules and deliver them in one of -these ways: - -- Microsoft SCCM — See the Deploy Endpoint Policy Manager Settings Using SCCM or Other Management - System! topic for additional information - -- Microsoft Intune — See the - [Block and Allow USB and CD-ROMs with your MDM solution](/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/methods/mdm.md) video overview - for additional information - -- PolicyPak Cloud service — See the - [Block USB sticks using Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/knowledgebase/devicemanager/videolearningcenter/methods/cloud.md) topic for - additional information - -Then allow the client machine with the Endpoint Policy Manager client-side extension (CSE) to -receive the directives and perform the work. - -:::note -If you use an MDM service or Endpoint Policy Manager cloud service, you can deliver -Endpoint Policy Manager Device Privilege Manager settings even to non-domain-joined machines over -the Internet. -::: - - -## Endpoint Policy Device Manager Components - -Endpoint Policy Managerhas the following components: - -- A Management Station — The Endpoint Policy Manager Admin Console MSI must be installed on the - management station where you create GPOs. Once it’s installed, you’ll see the **Endpoint Policy - Manager Settings** > **Endpoint Policy Manager Device Privilege Manager** node, as shown below. - -- The Endpoint Policy Manager CSE — This runs on the client (target) machine and is the same CSE for - all Endpoint Policy Manager components (such as Least Privilege Manager, Device Manager, - Application Settings Manager) - -- Windows Endpoints — In order to use these, they must be licensed for Endpoint Policy Manager - Device Manager using one of the licensing methods - -- Also available is Endpoint Policy Manager Cloud when you purchase Enterprise or SaaS - -Endpoint Policy Manager Cloud enables you to create Endpoint Policy Manager Device Manager -directives using the in-cloud editors and connect endpoints to get Endpoint Policy Manager Device -Manager directives. - -![ppcloud](/images/endpointpolicymanager/device/devicemanager/ppcloud.webp) - -While this manual mostly demonstrates concepts using the Group Policy editor, nearly everything can -be done using the Endpoint Policy Manager Cloud editors. Additionally, you can take on-prem MMC -directives and upload them to Endpoint Policy Manager Cloud and take in-cloud directives and -download them back as MMC directives. - -Also, you may use Endpoint Policy Manager Device Manager with any management system you like such as -SCCM, Intune, PDQ deploy or anything else. This is because Endpoint Policy Manager directives may be -exported as XML and wrapped up using the Exporter tool. This A free utility that lets you take -Endpoint Policy Manager Admin Templates Manager and our other products’ XML files and wrap them into -a portable MSI file for deployment using Microsoft Endpoint Manager (SCCM and Intune) or your own -systems management software. - -The [MDM & UEM Tools](/docs/endpointpolicymanager/manuals/introductionandquick/mdm/overview.md) topic explains how to use the Endpoint Policy Manager -Exporter to wrap up any Endpoint Policy Manager directives and deliver them using Microsoft Endpoint -Manager (SCCM and Intune), KACE, your own MDM service, or Endpoint Policy Manager Cloud. - -This topic will get you going with the concepts and results you’re looking for and then you may -choose whatever delivery method makes sense for your organization. - -## Why you need Endpoint Policy Device Manager - -Microsoft makes it easy to turn off all access to USB sticks and other removable devices. With a -simply GPO or MDM setting that can accomplished. - -Here is exactly how to do that (without using Endpoint Policy Manager Device Manager) when using -ADMX settings via GPOs. - -![device01](/images/endpointpolicymanager/device/devicemanager/device01.webp) - -The same may be performed using and MDM service like Intune using similar settings. - -![device02](/images/endpointpolicymanager/device/devicemanager/device02.webp) - -The result will be the same where Removable Devices will be stopped. - -![device03](/images/endpointpolicymanager/device/devicemanager/device03.webp) - -In this way you can completely shut out all devices for all users for all times. - -Unlike Microsoft policies, Endpoint Policy Manager Device Manager allows customized settings for USB -and other removable devices (henceforth written as devices). - -You can perform the following management on devices: - -- Which on-Prem Active Directory or Azure user can use devices -- What access type those devices has (Read, Read/Write, Full) -- Grant access to a device only if the device has Bitlocker on it -- Specify specific device vendors, device IDs and device revisions -- Specify specific serial numbers for devices - -None of this is possible with the in-box settings with Microsoft GPOs or MDM policies (like Intune). - -:::note -Consider integrating with Netwrix Privilege Secure for Endpoints for additional features -when managing devices: -::: - - -- Endpoint Policy Manager Device Manager only deals with aspects of removable data devices. For - other device types, like Bluetooth, Serial Ports, printers and shares, consider Netwrix Endpoint - Protector. See the Device Control topic in the User Manual section of the Netwrix Endpoint - Protector [documentation](https://helpcenter.netwrix.com/category/endpointprotector) for - additional information. -- Endpoint Policy Manager Device Manager doesn't inspect the data as it goes by looking for - patterns. That is, PolicyPak Device Manager is not a traditional "Data Loss Prevention" (DLP) - product. For that functionality, consider Netwrix Endpoint Protector. See the Content Aware - Protection topics in the Administration section of the Netwrix Endpoint Protector - [documentation](https://helpcenter.netwrix.com/category/endpointprotector) for additional - information. -- Endpoint Policy Manager Device Manager isn't trying to protect against non-data devices like - "RubberDucky" devices or similar devices which act as keyboards to perform malicious actions. For - that functionality, consider Netwrix Endpoint Protector. See the Content Aware Protection topics - in the Administration section of the Netwrix Endpoint Protector - [documentation](https://helpcenter.netwrix.com/category/endpointprotector) for additional - information. - -To get started on device policies, create a link a GPO and link it to where your computers are. The -examples use East Sales Desktops. - -You may also use Endpoint Policy Manager Cloud to create these policies, or export your GPOs created -in this example for use with an MDM service like Intune. diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/_category_.json b/docs/endpointpolicymanager/manuals/gpocompliancepak/_category_.json deleted file mode 100644 index df1b0d7c76..0000000000 --- a/docs/endpointpolicymanager/manuals/gpocompliancepak/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "GPO Compliance Pak", - "position": 50, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/_category_.json b/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/_category_.json deleted file mode 100644 index 034966047e..0000000000 --- a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Group Policy Compliance Reporter", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/_category_.json b/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/_category_.json deleted file mode 100644 index e00dfabfec..0000000000 --- a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Concepts and Quick Start", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "concepts" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/prepare/_category_.json b/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/prepare/_category_.json deleted file mode 100644 index ca9ba6358b..0000000000 --- a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/prepare/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Getting Ready", - "position": 30, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/prepare/licensing.md b/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/prepare/licensing.md deleted file mode 100644 index 83c5b0f82f..0000000000 --- a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/prepare/licensing.md +++ /dev/null @@ -1,117 +0,0 @@ ---- -title: "Licensing Information" -description: "Licensing Information" -sidebar_position: 20 ---- - -# Licensing Information - -Neither the Endpoint Policy Manager GPCR server nor the client (admin console) require a license; -but the endpoint does. - -:::note -Watch this video to see how to request a license: -[How to Request Licenses from Endpoint Policy Manager by Creating a "License Request Key"](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/requestall/licenserequestkey.md). -::: - - -:::note -To install the license file received from Endpoint Policy Manager, see the following -video: -[How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/installall/installuniversal.md). -::: - - -Note that since the Endpoint Policy Manager client (admin console) does not need to be licensed, you -may run unlimited numbers of it in any organizational unit (OU). The Endpoint Policy Manager client -does not have to receive license files in order to work properly. - -## Licenses and Reporting - -Table 1 provides more detail as to what is reported through Endpoint Policy Manager GPCR. - -Table 1: GPCR reporting. - -| If the target (endpoint) computer has… | Endpoint Policy Manager GPCR will… | -| ----------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| No license | Return nothing in the RSOP report | -| The word "computer" in the name | Report everything: all Endpoint Policy Manager settings, Microsoft Admin Templates settings, Microsoft Group Policy Preferences settings, and Microsoft Security settings A computer acts as if it had a Endpoint Policy Manager GPCR license. | -| A Endpoint Policy Manager GPCR endpoint license | Report everything: all Endpoint Policy Manager settings, Microsoft Admin Templates settings, Microsoft Group Policy Preferences settings, and Microsoft Security settings The client machine will be fully licensed. | - -In order to get Microsoft data (policies, security, and preferences), license all endpoints for -Endpoint Policy Manager GPCR reporting. You may also license Endpoint Policy Manager GPCR endpoints -if you are not licensed for other Endpoint Policy Manager products. You are not required to purchase -other AppSets or policies if you only want to engage in Group Policy reporting via the Endpoint -Policy Manager GPCR. To get licensed, run the licensing tool (LT) to generate a license request key -(LRK), then send it to Endpoint Policy Manager Sales. - -## Supported Group Policy Settings for Reporting - -Supported and unsupported Group Policy settings within a GPO or test are shown in Table 2. - -Table 2: Group Policy supported and unsupported settings. - -| Data type | User Policies | Computer Policies | -| ----------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| Endpoint Policy Manager settings (all) | ![gpcr_concepts_and_quickstart_4_17x17](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_4_17x17.webp) | ![gpcr_concepts_and_quickstart_4_17x17](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_4_17x17.webp) | -| Group Policy Admin Templates (all ADM(X) templates and settings) | ![gpcr_concepts_and_quickstart_4_17x17](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_4_17x17.webp) | ![gpcr_concepts_and_quickstart_4_17x17](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_4_17x17.webp) | -| Group Policy Security Settings | | | -| Windows | Security | | | -| Account Policies | Password Policy | n/a | ![gpcr_concepts_and_quickstart_4_17x17](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_4_17x17.webp) | -| Account Policies | Account Lockout Policy | n/a | ![gpcr_concepts_and_quickstart_4_17x17](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_4_17x17.webp) | -| Account Policies | Kerberos Policy | n/a | ![gpcr_concepts_and_quickstart_4_17x17](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_4_17x17.webp) | -| Local Policies | Audit Policy | n/a | ![gpcr_concepts_and_quickstart_4_17x17](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_4_17x17.webp) | -| Local Policies | User Rights Assignment | n/a | ![gpcr_concepts_and_quickstart_4_17x17](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_4_17x17.webp) | -| Local Policies | Security Options | n/a | ![gpcr_concepts_and_quickstart_4_17x17](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_4_17x17.webp) | -| Event log | n/a | ![gpcr_concepts_and_quickstart_4_17x17](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_4_17x17.webp) | -| Windows Settings | | | -| Name resolution policy | n/a | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | -| Scripts | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | -| Policy-based QoS | n/a | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | -| Public key policies | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | n/a | -| Software restriction policies | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | n/a | -| Restricted groups | n/a | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | -| System services | n/a | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | -| Registry | n/a | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | -| File | n/a | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | -| Wired network (IEEE 802.3) policies | n/a | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | -| Windows firewall with advanced security | n/a | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | -| Network list manager policies | n/a | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | -| Wireless network (IEEE 802.11) policies | n/a | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | -| Network access protection | n/a | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | -| Application control policies (Applocker) | n/a | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | -| IP security policies on Active Directory | n/a | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | -| Advanced audit policy configuration | n/a | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | -| Group Policy Preferences (all are supported except those listed below) | ![gpcr_concepts_and_quickstart_4_17x17](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_4_17x17.webp) | ![gpcr_concepts_and_quickstart_4_17x17](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_4_17x17.webp) | -| Group Policy Preference data sources | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | -| Scheduled tasks (immediate XP, scheduled XP) | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | -| Power options and scheme (for Windows XP) | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | -| ODBC data source | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | -| Folder options | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | ![gpcr_concepts_and_quickstart_4_17x17](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_4_17x17.webp)\* | -| Start menu (for XP) | n/a | ![gpcr_concepts_and_quickstart_4_17x17](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_4_17x17.webp) | -| Internet Explorer (5, 6, and 7) | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | -| Registry collection (special registry item type) | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | -| Folder redirection | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | n/a | -| Internet Explorer maintenance | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | n/a | -| Group Policy software install | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | -| Any third-party Group Policy Extension not from Endpoint Policy Manager | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | ![gpcr_concepts_and_quickstart_5_15x15](/images/endpointpolicymanager/grouppolicycompliancereporter/prepare/gpcr_concepts_and_quickstart_5_15x15.webp) | - -\*File type actions are not in the RSOP and thus show as "missing" in PPGPCR. - -:::note -Endpoint Policy Manager GPCR is licensed per computer; if a particular endpoint is not -licensed, it will not return data. -::: - - -:::note -It may look like there are more unsupported settings than supported settings. However, the -settings that are supported cover the top 90% of tasks that administrators typically do with Group -Policy and the unsupported settings cover the bottom 10%. We will be expanding coverage as needed in -the future. -::: - - -Endpoint Policy Manager Sales can send you a working Endpoint Policy Manager GPCR key. To install -the key, follow these instructions: -[How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/installall/installuniversal.md). diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/pull/_category_.json b/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/pull/_category_.json deleted file mode 100644 index 9aaa39d55d..0000000000 --- a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/pull/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Standalone (Pull) Mode Quick Start", - "position": 40, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/pull/overview.md b/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/pull/overview.md deleted file mode 100644 index 0ffb9006b7..0000000000 --- a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/pull/overview.md +++ /dev/null @@ -1,26 +0,0 @@ ---- -title: "Standalone (Pull) Mode Quick Start" -description: "Standalone (Pull) Mode Quick Start" -sidebar_position: 40 ---- - -# Standalone (Pull) Mode Quick Start - -:::note -For an overview of Endpoint Policy Manager GPCR in pull mode, watch this video -[Using Pull Mode (with or without PPGPCR server)](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/gettingstarted/modepull.md). -::: - - -Endpoint Policy Manager GPCR has three panes in which you can perform work: - -- Snapshots: This is where you create sets of computers you want to query. -- Tests: This is where you define tests that you want to validate. -- Results: This is where you select a specific snapshot and a test and get results (see Figure 11) - -![gpcr_concepts_and_quickstart_12](/images/endpointpolicymanager/grouppolicycompliancereporter/mode/pull/gpcr_concepts_and_quickstart_12.webp) - -Figure 11. The Results pane of the GPCR client (admin console). - -Endpoint Policy Manager GPCR starts on the Snapshots pane. We'll start on this pane and move through -each of the panes in the sections below. diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/grouppolicycomplianc/_category_.json b/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/grouppolicycomplianc/_category_.json deleted file mode 100644 index fc202db52f..0000000000 --- a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/grouppolicycomplianc/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Tuning and Troubleshooting", - "position": 30, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/grouppolicycomplianc/tuning/_category_.json b/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/grouppolicycomplianc/tuning/_category_.json deleted file mode 100644 index b0372c5f74..0000000000 --- a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/grouppolicycomplianc/tuning/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Tuning Group Policy Compliance Reporter", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/overview.md b/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/overview.md deleted file mode 100644 index 7922fface8..0000000000 --- a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/overview.md +++ /dev/null @@ -1,30 +0,0 @@ ---- -title: "Group Policy Compliance Reporter" -description: "Group Policy Compliance Reporter" -sidebar_position: 10 ---- - -# Group Policy Compliance Reporter - -Thank you for trying or purchasing Netwrix Endpoint Policy Manager (formerly PolicyPak) Group Policy -Compliance Reporter (GPCR). Endpoint Policy Manager GPCR reports whether something you wanted -delivered by Group Policy actually was delivered by the Group Policy engine. Endpoint Policy Manager -GPCR is made up of the following components: - -- GPCR client (also known as the admin console): This is the main interface for Endpoint Policy - Manager GPCR. -- GPCR endpoints: These are the machines you wish to get Group Policy data from. -- GPCR server (optional): This enables endpoints to push data to a common collection point and - enables multiple administrators to share results and reuse each other's completed work. - -This document is both our QuickStart Guide and our full User Guide for Endpoint Policy Manager GPCR -and will help you understand the Endpoint Policy Manager GPCR system. For details on our other -products,  see theEndpoint Policy Manager website. After your testing is complete and you're ready -to license Endpoint Policy Manager GPCR, send an email to -[sales@endpointpolicymanager.com](mailto:sales@endpointpolicymanager.com) or call (800) 883-8002. - -:::note -You may also wish to watch our Quickstart videos of Endpoint Policy Manager GPCR if you're -in a hurry: [Concepts and Quick Start](/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/concepts/concepts.md). - -::: diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/push/_category_.json b/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/push/_category_.json deleted file mode 100644 index 6697e97814..0000000000 --- a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/push/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Server with Push Mode", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/push/install.md b/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/push/install.md deleted file mode 100644 index c080612888..0000000000 --- a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/push/install.md +++ /dev/null @@ -1,57 +0,0 @@ ---- -title: "Installation and Uninstallation" -description: "Installation and Uninstallation" -sidebar_position: 10 ---- - -# Installation and Uninstallation - -We recommend that installation of the GPCR Server Edition be on a server (Server 2008 R2 or higher). -However, Endpoint Policy Manager GPCR in push mode doesn't need to be installed on a server at all, -and could be installed on any machine (Windows 7 or higher). To start the installation, find the -Endpoint Policy Manager GP Compliance Reporter (Server).msi file, as shown in Figure 36. - -![gpcr_server_with_push_mode](/images/endpointpolicymanager/grouppolicycompliancereporter/mode/push/gpcr_server_with_push_mode.webp) - -Figure 36. GPCR server MSI. - -**Step 1 –** To install Endpoint Policy Manager GP Compliance Reporter, click on the MSI file and -start the wizard (Figure 37). - -![gpcr_server_with_push_mode_1](/images/endpointpolicymanager/grouppolicycompliancereporter/mode/push/gpcr_server_with_push_mode_1.webp) - -Figure 37. The Endpoint Policy Manager Group Policy Compliance Reporter Server Setup Wizard. - -**Step 2 –** Next, choose the domain group that will have rights to the Endpoint Policy Manager GPCR -server as shown in Figure 38. - -:::note -To see a video on Compliance Reporter and specific group membership requirements, see the -following link: -[Enhanced Security for Server](/docs/endpointpolicymanager/knowledgebase/gpcompliancereporter/videolearningcenter/gettingstarted/securityenhanced.md). -::: - - -![gpcr_server_with_push_mode_2](/images/endpointpolicymanager/grouppolicycompliancereporter/mode/push/gpcr_server_with_push_mode_2.webp) - -Figure 38. Choosing the domain group that will have access to the GPCR server. - -**Step 3 –** Then select which type of database you want to use (see Figure 39). You can choose -Microsoft SQL Server Compact if you only expect a small amount of data for processing and testing. -However, in most cases, Microsoft SQL Server is recommended. - -![gpcr_server_with_push_mode_3](/images/endpointpolicymanager/grouppolicycompliancereporter/mode/push/gpcr_server_with_push_mode_3.webp) - -Figure 39. Selecting the type of database. - -**Step 4 –** Once the installation process is complete, close the wizard. - -:::note -If you need to uninstall Endpoint Policy Manager GPCR Server, use Add/Remove Programs and -uninstall Endpoint Policy Manager. Then, remove -::: - - -`C:\ProgramData\PolicyPak\PolicyPak Group Policy Compliance Reporter Server` and all subfolders. -Additionally, remove the Endpoint Policy Manager Group Policy Compliance Reporter (endpoint) license -from the Group Policy Object (GPO). diff --git a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/push/setup/_category_.json b/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/push/setup/_category_.json deleted file mode 100644 index 95ee264fe2..0000000000 --- a/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/push/setup/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Setup and Clientless Auditing", - "position": 40, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/gporeductionandtrans/_category_.json b/docs/endpointpolicymanager/manuals/gporeductionandtrans/_category_.json deleted file mode 100644 index 947d5ef9e6..0000000000 --- a/docs/endpointpolicymanager/manuals/gporeductionandtrans/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "GPO Reduction And Transitions Pak", - "position": 70, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/gporeductionandtrans/adminstrativetemplat/_category_.json b/docs/endpointpolicymanager/manuals/gporeductionandtrans/adminstrativetemplat/_category_.json deleted file mode 100644 index 5c8b87e152..0000000000 --- a/docs/endpointpolicymanager/manuals/gporeductionandtrans/adminstrativetemplat/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Administrative Templates Manager", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/gporeductionandtrans/adminstrativetemplat/export.md b/docs/endpointpolicymanager/manuals/gporeductionandtrans/adminstrativetemplat/export.md deleted file mode 100644 index 38e74c063d..0000000000 --- a/docs/endpointpolicymanager/manuals/gporeductionandtrans/adminstrativetemplat/export.md +++ /dev/null @@ -1,22 +0,0 @@ ---- -title: "Exporting Policies and Collections" -description: "Exporting Policies and Collections" -sidebar_position: 50 ---- - -# Exporting Policies and Collections - -The [Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/uemtools.md) topic explains how to -use the Endpoint Policy Manager Exporter to wrap up any Endpoint Policy Manager directives and -deliver them using Microsoft Endpoint Manager (SCCM and Intune), KACE, your own MDM service, or -Endpoint Policy Manager Cloud. To export a policy for later use using Endpoint Policy Manager -Exporter or Endpoint Policy Manager Cloud, right-click the collection or the policy and select -**Export to XML**. This allows you to save an XML file for later use. - -:::note -For a video of Endpoint Policy Manager Admin Templates Manager delivering settings using -Endpoint Policy Manager Exporter and Microsoft Endpoint Manager (SCCM and Intune), see the -[Endpoint Policy Manager Cloud: Deploy Group Policy Admin template settings over the internet](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/admintemplatesmethods/deployinternet.md) -topic for additional information. - -::: diff --git a/docs/endpointpolicymanager/manuals/gporeductionandtrans/adminstrativetemplat/gettoknow/_category_.json b/docs/endpointpolicymanager/manuals/gporeductionandtrans/adminstrativetemplat/gettoknow/_category_.json deleted file mode 100644 index 3e0cad7f78..0000000000 --- a/docs/endpointpolicymanager/manuals/gporeductionandtrans/adminstrativetemplat/gettoknow/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Getting to Know Administrative Templates Manager", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/gporeductionandtrans/adminstrativetemplat/overview.md b/docs/endpointpolicymanager/manuals/gporeductionandtrans/adminstrativetemplat/overview.md deleted file mode 100644 index 333dc58b49..0000000000 --- a/docs/endpointpolicymanager/manuals/gporeductionandtrans/adminstrativetemplat/overview.md +++ /dev/null @@ -1,93 +0,0 @@ ---- -title: "Administrative Templates Manager" -description: "Administrative Templates Manager" -sidebar_position: 10 ---- - -# Administrative Templates Manager - -:::note -Before reading this section, please see the -[Installation Quick Start](/docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/overviewinstall.md) topic  for more -information on the following: -::: - - -- Install the Admin MSI on your GPMC machine -- Install the CSE on a test Windows machine -- Set up a computer in Trial mode or Licensed mode -- Set up a common OU structure - -Optionally, if you don't want to use Group Policy, see the -[Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/uemtools.md) topic for more -information. - -Endpoint Policy Manager Admin Templates Manager enables administrators to harness the existing power -of Microsoft's 3000+ Admin Template settings and a lot more. - -:::note -See the -[Endpoint Policy Manager Admin Templates: Collections and Item Level Targeting](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/videolearningcenter/admintemplatesmanager/collections.md) -topic for more in formation on Endpoint Policy Manager Admin Templates Manager. -::: - - -![about_policypak_admin_templates](/images/endpointpolicymanager/adminstrativetemplates/about_endpointpolicymanager_admin_templates.webp) - -Here we can see some of Microsoft's Admin Template settings. - -![about_policypak_admin_templates_1](/images/endpointpolicymanager/adminstrativetemplates/about_endpointpolicymanager_admin_templates_1.webp) - -Endpoint Policy Manager Admin Templates Manager is a node you see within every Group Policy Object -(GPO) you create. - -Endpoint Policy Manager Admin Templates Manager enables you to perform the following functions: - -- Assemble settings (policies) into collections -- Set Item-Level Targeting on policies and collections -- Deliver user-side policies to computers (without Group Policy Loopback mode) -- Use either Local Storage or Central Storage when choosing definitions -- Search for policies that match certain words in their titles or help text -- Export policies or collections as XML files (available with Endpoint Policy Manager Exporter and - Endpoint Policy Manager Cloud). See the - [Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/uemtools.md) topic for more - information on using Endpoint Policy Manager with MDM and UEM Tools. - -The basic way to use Endpoint Policy Manager Admin Templates Manager is as follows: - -- Create a Microsoft GPO using Endpoint Policy Manager Admin Templates Manager. If you use Group - Policy as the delivery mechanism, it is deployed to client machines. -- If you do not use Group Policy, deploy the GPO using one of these other ways: - - - Microsoft Endpoint Manager (SCCM and Intune) - - Your own systems-management software - - An MDM service - - Endpoint Policy Manager Cloud service - -- The client machine embraces the directives and performs the work - -Endpoint Policy Manager Admin Templates Manager lets admins use Group Policy to deliver settings and -also lets you use a mechanism other than Group Policy to get policies delivered. - -:::note -Additionally, using the Endpoint Policy Manager Cloud service, can even deliver Group -Policy settings to non-domain-joined machines over the Internet. -::: - - -## Components - -Endpoint Policy Manager Admin Templates Manager has the following components: - -- A management station — Start out by creating a standard GPO (which will be edited) and then use - the Endpoint Policy Manager Admin Templates Manager node. -- The Endpoint Policy Manager client-side extension (CSE) — This runs on the client (target) - machine. It is the same CSE for all Endpoint Policy Manager products. There isn't anything - separate to install, and the Endpoint Policy Manager CSE must be present in order to accept - Endpoint Policy Manager Admin Templates Manager directives. -- Endpoints — Must be licensed for Endpoint Policy Manager Admin Templates Manager using one of the - licensing methods -- Endpoint Policy Manager Exporter (optional) — A free utility that lets you take Endpoint Policy - Manager Admin Templates Manager and our other products XML files and wrap them into a portable MSI - file for deployment using Microsoft Endpoint Manager (SCCM and Intune) or your own - systems-management software. diff --git a/docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/_category_.json b/docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/_category_.json deleted file mode 100644 index f1b56fb35d..0000000000 --- a/docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Preferences Manager", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/gettingstarted/_category_.json b/docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/gettingstarted/_category_.json deleted file mode 100644 index 84c8ba7063..0000000000 --- a/docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/gettingstarted/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Quick Start", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "gettingstarted" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/gettingstarted/gettingstarted.md b/docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/gettingstarted/gettingstarted.md deleted file mode 100644 index db30aae2ab..0000000000 --- a/docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/gettingstarted/gettingstarted.md +++ /dev/null @@ -1,83 +0,0 @@ ---- -title: "Quick Start" -description: "Quick Start" -sidebar_position: 20 ---- - -# Quick Start - -This Quickstart of Netwrix Endpoint Policy Manager (formerly PolicyPak) Preferences Manager will -introduce the following: - -- Deploying Microsoft Group Policy Preference items without Group Policy by using your own on-prem - deployment system, such as Microsoft Endpoint Manager (SCCM and Intune), KACE, and so on. -- Keeping Microsoft Group Policy Preferences settings compliant even when the computer goes offline - (regardless of how they are deployed). - -:::note -See Appendix E: -[Installation Quick Start](/docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/overviewinstall.md) and User Guide for -additoinal information on Endpoint Policy Manager Preferences Manager in use with Endpoint Policy -Manager Cloud -::: - - -:::note -To perform these demonstrations, Microsoft Group Policy Preference items must be -available. You can use some of our preconfigured items from the Endpoint Policy Manager Portal, or -you can create your own using the Group Policy Preferences Editor. -::: - - -## Option 1 - Downloading Microsoft Group Policy Preference Example Items - -Some easy-to-use Microsoft Group Policy Preference items have been previously created and are -available inside the Endpoint Policy Manager Portal for download in the Latest Manuals section. -Currently the file is called `ppprefs-shortcut.xml`.  You can get to it by accessing the customer -portal and navigating to Latest Manuals.  Then, click on Endpoint Policy Manager Examples (to be -used with PP Cloud-MDM-SCCM-etc).zip. - -![quickstart_using_policypak](/images/endpointpolicymanager/preferences/quickstart_using_endpointpolicymanager.webp) - -Inside the download of the Endpoint Policy Manager preferences and Endpoint Policy Manager Cloud XML -examples, you'll see a file named `ppprefs-shortcut.xml`. - -![quickstart_using_policypak_1](/images/endpointpolicymanager/preferences/quickstart_using_endpointpolicymanager_1.webp) - -Remove the file from the ZIP archive, and put it in a handy place for the deployment step. - -The Group Policy Preference item has a simple goal: to place a shortcut for www.endpointpolicymanager.com on the -desktop. If you wish to create a Group Policy Preference item from scratch, see the next section. - -## Option 2 - Using Microsoft Group Policy Preferences Editor - -While you can use any combination of Group Policy Preference items, we strongly recommend that you -use the Group Policy Preference item shown below, which puts an icon for www.endpointpolicymanager.com on the -desktop. - -These are the settings used to make the Group Policy Preference item: - -- Name: www.endpointpolicymanager.com -- Target Type: URL -- Location: Desktop -- Target URL: www.endpointpolicymanager.com -- Icon file path: `%SystemRoot%\system32\SHELL32.dll` -- Icon index: 47 - -![quickstart_using_policypak_2](/images/endpointpolicymanager/preferences/quickstart_using_endpointpolicymanager_2.webp) - -When you click **OK**, it will save the data within the Group Policy Object (GPO). However, you can -drag and drop a Group Policy Preference item to the desktop or a folder, which makes an XML file. -Another way to do this is to right-click either the Endpoint Policy Manager or Endpoint Policy -Manager Preferences Manager node, as seen below, and use the Group Policy Preference Export wizard, -which will export the Group Policy Preference items from the GPO. - -:::note -The Group Policy Preference Export wizard will only export settings for the User side or -Computer side, depending on which side on are on. -::: - - -![quickstart_using_policypak_3](/images/endpointpolicymanager/preferences/quickstart_using_endpointpolicymanager_3.webp) - -Keep the Group Policy Preference item file you created handy for the next step. diff --git a/docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/itemleveltargeting.md b/docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/itemleveltargeting.md deleted file mode 100644 index 44595e3dfe..0000000000 --- a/docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/itemleveltargeting.md +++ /dev/null @@ -1,81 +0,0 @@ ---- -title: "Item-Level Targeting" -description: "Item-Level Targeting" -sidebar_position: 30 ---- - -# Item-Level Targeting - -One of the best features of Microsoft Group Policy Preferences is its Item-Level Targeting. It -enables you to filter where a particular Group Policy Preference item will take effect. - -:::note -See [Group Policy Preferences: Item Level Targeting](/docs/endpointpolicymanager/knowledgebase/archive/itemleveltartgeting.md) -for a video of Group Policy Preferences and Item-Level targeting -::: - - -If you followed the Quickstart guide in the previous section, then you deployed a Group Policy -Preferences shortcut item to the desktop for every user. With Netwrix Endpoint Policy Manager -(formerly PolicyPak) Preferences Manager, there are two ways you can limit or target which users and -computers will receive Group Policy Preferences directives by doing the following: - -- Use Endpoint Policy Manager Exporter and specify certain users and groups instead of computer/all - users -- Modify Group Policy Preference items in such a way that they have Item-Level Targeting that - describes the conditions under which they should apply - -Additionally, you can choose to use both methods together if you prefer. For instance, you might: - -- Use the Group Policy Preferences Editor and make a Group Policy Preferences Power Settings item to - configure power settings -- Continue to use the Group Policy Preferences Editor Item-Level Targeting to specify that the item - should only apply to Windows 10 laptops that are in a particular IP address range - (192.168.2.0–192.168.3.0) -- Use Endpoint Policy Manager Exporter to specify that only the Sales group within Active Directory - should process this policy - -In this example, the net result of using these methods is that your Group Policy Preference item -will only apply to Windows 10 machines that are laptops and within a specific IP address range -(192.168.2.0–192.168.3.0), and when the user is a member of the Sales Active Directory group. - -![group_policy_preferences_item](/images/endpointpolicymanager/preferences/group_policy_preferences_item.webp) - -You can then choose which item you want to target: - -![group_policy_preferences_item_1](/images/endpointpolicymanager/preferences/group_policy_preferences_item_1.webp) - -You can apply one or more targeting items to a Microsoft Group Policy Preference item, which enables -targeting items to be joined logically. You can also add targeting collections, which group together -targeting items in much the same way parentheses are used in an equation. In this way, you can -create a complex determination about where a policy will be applied. Collections may be set to And, -Or, Is, or Is Not. - -![group_policy_preferences_item_2](/images/endpointpolicymanager/preferences/group_policy_preferences_item_2.webp) - -In the example above the Pak would only apply to (1) Windows 10 machines when (2) the machine is -portable and (3) the user is in the FABRIKAM\Traveling Sales Users group. - -Here are some real-world examples of how you can use Item-Level Targeting with Group Policy -Preferences: - -- Mobile computers — If you want to deploy settings for users on mobile PCs, filter the Group Policy - Preference item to deploy to only mobile PCs by using the Portable Computer targeting item. -- Operating system version — You can specify different settings for applications based on the - operating system version. To do this, create two Group Policy Preference items, one for each - operating system. Then filter each AppSet using the Operating System targeting item. -- Group membership — You can specify a Group Policy Preference item that would normally apply to all - users on the computer and, instead, filter by members within a specific group to pick up and - process the Group Policy Preference item. -- IP range — You can specify different settings for various IP ranges, like different browser - settings for the home office and each field office. - -When Item-Level Targeting is used, it can be seen and verified in the XML view of the Group Policy -Preference item by choosing the Display Xml option. The Item-Level Targeting is highlighted in the -Filters section. - -![group_policy_preferences_item_3](/images/endpointpolicymanager/preferences/group_policy_preferences_item_3.webp) - -![group_policy_preferences_item_4](/images/endpointpolicymanager/preferences/group_policy_preferences_item_4.webp) - -The XML of the Group Policy Preference item verifies that Item-Level Targeting is being used. diff --git a/docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/overview.md b/docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/overview.md deleted file mode 100644 index c7e88b358f..0000000000 --- a/docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/overview.md +++ /dev/null @@ -1,114 +0,0 @@ ---- -title: "Preferences Manager" -description: "Preferences Manager" -sidebar_position: 20 ---- - -# Preferences Manager - -:::note -Before reading this section, please ensure you have read Book 2: -[Installation Quick Start](/docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/overviewinstall.md), which will help you -learn to do the following: -::: - - -- Install the Admin MSI on your GPMC machine -- Install the CSE on a test Windows machine -- Set up a computer in Trial mode or Licensed mode -- Set up a common OU structure -- Optionally, if you don't want to use Group Policy, read the section in Appendix A: - [Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/uemtools.md) on Group Policy and - non–Group Policy methods (MEMCM, KACE, and MDM service or Netwrix Endpoint Policy Manager - (formerly PolicyPak) Cloud) to deploy your directives. - -Microsoft Group Policy Preferences are great because they let you configure 21 categories of items, -including the following a,nd many more. - -- Printers -- Shortcuts -- Drive maps -- VPN settings -- Device lock-down -- Regional settings - -![about_policypak_gpo_export](/images/endpointpolicymanager/preferences/about_endpointpolicymanager_gpo_export.webp) - -Despite these advantages, Microsoft's Group Policy Preferences have some issues that cannot be -overcome without a little help. That's where Endpoint Policy Manager Preferences Manager comes in. - -## Main Concepts - -Endpoint Policy Manager Preferences Manager does the following jobs: - -- It maintains the compliance of a Group Policy Preference item even when the computer is offline. -- It enables a Group Policy Preference item to be delivered without using Active Directory Group - Policy. Therefore, with Endpoint Policy Manager Preferences Manager, you may now use Microsoft - Endpoint Manager (SCCM and Intune), LANDesk, or KACE to deliver Group Policy Preferences without - the inbox Group Policy mechanism being involved. -- In conjunction with the Endpoint Policy Manager Cloud service, or your own mobile device - management (MDM) service, you can deliver Group Policy Preference items to computers over the - Internet (to both domain-joined and non-domain-joined machines). For more information on Endpoint - Policy Manager Cloud, see Appendix E: - [Setup, Download, Install, and Verify](/docs/endpointpolicymanager/manuals/introductionandquick/cloud/quickstart/quickstart.md) and User Guide. For more - information about using Endpoint Policy Manager with an MDM service, see Appendix A: - [Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/uemtools.md). - -:::note -If you use the Endpoint Policy Manager Cloud service, you can deliver Group Policy -Preferences directives even to non-domain-joined machines. -::: - - -:::note -See -[Which settings can be managed with the Preferences Manager component?](/docs/endpointpolicymanager/knowledgebase/gpoexportmerge/knowledgebase/exportinggrouppolicypreferences/settings.md)for additional -information on Endpoint Policy Manager Preferences Manager used with SCCM, Endpoint Policy Manager -Cloud, or an MDM service, -::: - - -The basic way to use Endpoint Policy Manager Preferences Manager is to perform the following -procedures: - -- Create a Microsoft Group Policy Preferences directive on your Windows administrative machine using - the Microsoft GPMC and Group Policy Preferences Editor. -- Deliver the directive to the client machines. If you use Group Policy as the delivery mechanism, - the directive is received via client machines. You can also use Endpoint Policy Manager - Preferences Manager to deliver it via the following ways: - - - Microsoft Endpoint Manager (SCCM and Intune) - - Your own systems management software - - Endpoint Policy Manager Cloud service - -- Allow the client machine to embrace the directives and perform the work. - -This way you are not required to use the Group Policy mechanism as the transport to deploy Group -Policy Preferences directives. - -## Moving Parts - -Endpoint Policy Manager Preferences Manager has the following main components: - -- A management station — Start out by creating a standard Group Policy Preference item using the - GPMC you use every day. Then export the settings using the Endpoint Policy Manager Preferences - Manager Export wizard. You can export these settings for use with Endpoint Policy Manager Cloud, - or deploy these settings using methods other than Group Policy methods. -- The Endpoint Policy Manager client-side extension (CSE) — This runs on the client (target) - machine. It is the same CSE for all Endpoint Policy Manager products. There isn't anything - separate to install. -- Endpoints — Endpoints must be licensed for Endpoint Policy Manager Preferences Manager using one - of the licensing methods. -- Endpoint Policy Manager Exporter (optional) — A free utility that lets you take Microsoft Group - Policy Preferences and our other Endpoint Policy Manager XML data files and wrap them into a - portable MSI file for deployment using Microsoft Endpoint Manager (SCCM and Intune), or your own - systems management software. - -![about_policypak_gpo_export_1](/images/endpointpolicymanager/preferences/about_endpointpolicymanager_gpo_export_1.webp) - -Endpoint Policy Manager Preferences Manager does not require any particular type of domain -controllers (DCs). Nothing is installed on any DC, and you don't need to extend the Active Directory -schema. Additionally, you do not need to install any server components, upgrade any servers or DCs, -or buy any server-side infrastructure. There is no requirement for domain mode or functional level. -To be clear, every client computer (Windows 7 and higher) or Terminal Services (RDS)/Citrix machine -(Windows Server 2008 or higher) must have the Endpoint Policy Manager CSE installed and licensed. diff --git a/docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/preferences/_category_.json b/docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/preferences/_category_.json deleted file mode 100644 index 5dfef96d71..0000000000 --- a/docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/preferences/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Troubleshooting", - "position": 40, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/_category_.json b/docs/endpointpolicymanager/manuals/introductionandquick/_category_.json deleted file mode 100644 index 410f8e5344..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Introduction And Quick Start Manuals", - "position": 10, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/basicconcepts/_category_.json b/docs/endpointpolicymanager/manuals/introductionandquick/basicconcepts/_category_.json deleted file mode 100644 index 05f44642a7..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/basicconcepts/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Introduction and Basic Concepts", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "basicconcepts" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/basicconcepts/editions/_category_.json b/docs/endpointpolicymanager/manuals/introductionandquick/basicconcepts/editions/_category_.json deleted file mode 100644 index 7efb5738d9..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/basicconcepts/editions/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Editions, Solutions, Paks, and Policies", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/basicconcepts/licensing.md b/docs/endpointpolicymanager/manuals/introductionandquick/basicconcepts/licensing.md deleted file mode 100644 index 5dd2e224e7..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/basicconcepts/licensing.md +++ /dev/null @@ -1,300 +0,0 @@ ---- -title: "Licensing" -description: "Licensing" -sidebar_position: 20 ---- - -# Licensing - -Licensing Netwrix Endpoint Policy Manager (formerly PolicyPak) is easy. We have one tool to request -information about Active Directory and Intune. - -:::note -For a video overview of the process, watch this tutorial: -[How to Request Licenses from Endpoint Policy Manager by Creating a "License Request Key"](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/requestall/licenserequestkey.md) -::: - - -Here are the basics: - -- Endpoint Policy Manager is licensed on a per-client-computer basis. All client computers (desktop, - laptop, and virtual desktop infrastructure [VDI]) must be licensed if you want Endpoint Policy - Manager policies to apply and enforce settings. -- Endpoint Policy Manager is also licensed per concurrent-session-connection for your Terminal - Services (RDS) or Citrix servers. All inbound Terminal Services (RDS) or Citrix XenApp connections - must be licensed if you want Endpoint Policy Manager to apply and enforce settings. -- Endpoint Policy Manager can also be licensed in conjunction with an MDM service such as Intune, - Workspace ONE, or MobileIron. This scenario is covered later in this guide and in detail in - Appendix A: Using Endpoint Policy Manager with MDM and UEM Tools. - -:::note -To be in compliance with Endpoint Policy Manager licensing, you must license inbound -Terminal Services (RDS) or Citrix connections. These are simply added to the count of your Endpoint -Policy Manager licenses. For instance, if you want to use Endpoint Policy Manager with 500 desktops, -200 laptops, and 100 concurrent Terminal Services or Citrix session connections, then you will need -800 Endpoint Policy Manager licenses. Full details of how Endpoint Policy Manager licenses Terminal -Services (RDS) or Citrix inbound connections can be found at the following link: -[http://www.endpointpolicymanager.com/purchasing/citrix-licensing-scenarios.html](http://www.endpointpolicymanager.com/purchasing/citrix-licensing-scenarios.html). -::: - - -In other words, to be fully compliant, you must license the number of computers in Active Directory -plus the inbound Terminal Services (RDS) and/or Citrix connections. If you don't wish to run -Endpoint Policy Manager on your Terminal Services (RDS) or Citrix machines, then these inbound -connections do not need to be declared at purchase time. - -Once a computer is licensed, the trial mode restrictions are lifted. (The computer can be named -anything.) Virtual desktops (any VDI, including Windows Virtual Desktops) are licensed the same way -that real desktops and laptops are licensed. In short, we count the number of computer account -records in Active Directory. For most customers, all areas of Endpoint Policy Manager licensing are -handled by the Endpoint Policy Manager licensing tool (named LT.exe), which is included in the -Licensing for All On-Prem Products folder inside the ISO download. - -Endpoint Policy Manager licenses themselves can be deployed within Group Policy Objects (GPOs), or -delivered via MSI. Client computers download the GPO with the license file or the MSI with the -license file, and automatically determine if they are licensed. Be aware that the Endpoint Policy -Manager licensing tool (LT) is used with the Active Directory solution method and Intune, and not -other MDM services like VMware Workspace ONE. In those cases, you'll work with your sales team to -demonstrate how many machines are MDM-enrolled. - -:::note -To be in compliance with Endpoint Policy Manager licensing on Citrix and Terminal Services -(RDS), you must run LT on a server. When LT is run on a server, it is usually able to count Terminal -Services and Citrix connections and report them. Even if LT does not properly count the Citrix and -Terminal Services licenses, you are still bound by the End User License Agreement to report them for -licensing purposes. -::: - - -Endpoint Policy Manager's LT utility can also help you minimize costs by finding and disabling -unused computers. For instance, many organizations have dozens or hundreds of computers that have -not been logged onto for months. Since you pay on a per-computer basis with Endpoint Policy Manager -in Active Directory, we don't want you paying for computers you're not actually using. If you'd like -to find and disable unused computers, LT can help you do that before you make your initial license -request. If you want more information on this, jump to the section "Finding and Disabling Unused -Computers." - -Licensing occurs in two phases: - -- Phase I: Get a License Request Key.In this phase, LT will ask several questions—such as where you - want to license it—and will then help you generate your license request. This license is usually - good for one year, depending on your contract with Endpoint Policy Manager. -- Phase II: Re-run and get another License Request Key. Once the initial license year is up, you - simply re-run the Endpoint Policy Manager LT utility each following year. LT will review existing - installed licenses and do a count of computers. You need to perform this step every year - (according to your Endpoint Policy Manager license agreement) to continue to use Endpoint Policy - Manager. Otherwise, Endpoint Policy Manager will stop functioning on your anniversary date. You - pay for any overage from the previous year. - -## Finding and Disabling Unused Computers - -We only want you to pay for the computers you're actually going to use with the Endpoint Policy -Manager. Endpoint Policy Manager's LT has an option, "Find and Disable unused computers," as seen in -Figure 12. - -![licensing_policypak](/images/endpointpolicymanager/licensing_endpointpolicymanager.webp) - -Figure 12. The option to disable unused computers. - -When you select this option, you are led through an wizard that finds any computers that have not -been logged into for 90 days (or any other number of days you select). You can then select the -computers you want to disable and click "Next," as shown in Figure 13. - -![licensing_policypak_1](/images/endpointpolicymanager/licensing_endpointpolicymanager_1.webp) - -Figure 13. Selecting the unused computers. - -Note that you can also choose to include computers that no users have ever logged onto. All -computers that you select will be disabled when you click "Next." By doing so, you will have fewer -computers in your count and thus fewer to pay for. - -:::note -Endpoint Policy Manager's LT utility cannot re-enable accounts once they've been disabled. -Also, Endpoint Policy Manager's LT utility cannot move computer accounts after they are disabled. -::: - - -## Licensing Modes - -Licensing with Endpoint Policy Manager involves the following items: - -- A license for a component -- The component's capability if applicable (for instance, Least Privilege Manager has Standard and - Complete capabilities) -- A scope -- For Active Directory: a whole Active Directory Domain or specific organizational units (OUs) -- For MDM: a specific UPN or company name -- For Endpoint Policy Manager Cloud: licensed by Endpoint Policy Manager Cloud -- An enablement method -- Group Policy -- MDM (used with your MDM provider) -- Endpoint Policy Manager Cloud -- XML Method (used alongside a UEM tool, like SCCM) - -You can purchase some (or all) Paks, and then choose the enablement methods and dictate the licensed -scopes. In the XML example license file below, the customer has selected the following: - -- Specific Paks which entitle them to specific policies and specific capabilities if applicable (for - instance, Least Privilege Manager and Software Package Manager have specific capabilities) -- A whole domain for the scope (Fabrikam.com) -- Enablement methods "GP-POLICIES" and "XML-POLICIES" - - ``` - -                                  - Example (Customertest)                 - 2021-03-09                 - 2021-03-31                 - false                 -                  -                  -                  -                  - gp-policies                 - xml-policies                 -                  -                  -                  -                  -                  -                  -                  - complete                 -                  -                  -                  -                  - appx                 -                  -                  -                  -                  -                  -                  -                  -                  - ABCDEF==                 -                  - - ``` - -The licensing modes are: - -- Licensed Mode (temporary). When a computer is licensed (temporarily for 30 days or licensed for - one year), it is permitted to process all directives intended for it. In Licensed Mode, there is - no limit to the number of Endpoint Policy Manager directives a client machine will process and - keep compliant. -- Trial Mode. Trial Mode functions similarly to Licensed Mode. Trial Mode enables you to try - Endpoint Policy Manager very quickly in your test lab or real Active Directory. Trial Mode is - enabled when your test computers' names have the word "computer" in them. For instance, a computer - named "COMPUTER1" would automatically be in Trial Mode and act as if fully licensed. To see an - example of how and why this works, see this video: - [Testing and Troubleshooting By Renaming an endpoint Computer](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/testlabbestpractices/renameendpoint.md) - -We want you to use this Endpoint Policy Manager in your testing similarly to how you would use it in -the real world. So in Trial Mode, we allow you to do the following: - -- Deploy the client-side extension (CSE) to all the test machines you want to manage -- Install the GPMC admin console on a management station -- Fully test the software with any number of users and computers (provided the computer name has the - word "computer" in it) - -These restrictions allow you to use your own test lab or Active Directory OU to try the Endpoint -Policy Manager components. You'll be able to see what happens when you make central changes and -watch your clients react. - -## Licensing Endpoint Policy Manager with Your Own MDM Service - -Endpoint Policy Manager can be used in conjunction with your own MDM service, such as Workspace ONE -or MobileIron. However, licensing Endpoint Policy Manager with these utilities is a bit different -than licensing Endpoint Policy Manager with Active Directory or Intune. In short, you need to work -with your sales team to declare the number of Windows 10 machines you want to license. Typically, -you would use the MDM reporting system to express how many Windows 10 machines you have enrolled and -the number you plan add in the current year. All the details on exactly how to perform a count and -what to send back to Endpoint Policy Manager Sales can be found here: -[When licensing Endpoint Policy Managerwith an MDM provider, what do I need to send in to Endpoint Policy Manager? ](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingmdm/setup.md). - -An example of an MDM system account with a very low number of machines can be seen in Figure 14. -Note that the company information is obscured in this demonstration, but you would have to provide -it. - -![licensing_policypak_2](/images/endpointpolicymanager/licensing_endpointpolicymanager_2.webp) - -Figure 14. An example of an MDM system account. - -## License Requests - -Once you have ensured that your license request contains all computers that you want to license, -save the file, and then deliver this to your Endpoint Policy Manager sales representative to receive -a license file. - -:::note -The resulting XML file is tamper-proof and will be invalid if the number of elements is -changed after creation. -::: - - -## License Files - -You may receive multiple license files for Endpoint Policy Manager: - -To deploy your licenses, you can use the following: - -Use these key installation instructions (which demonstrate Active Directory, SCCM, and MDM methods): -[How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/installall/installuniversal.md) - -## Licensing Endpoint Policy Manager Through Endpoint Policy Manager Cloud - -Endpoint Policy Manager Cloud has a licensing mechanism build in. When a computer acquires a -license, it stays licensed unless it becomes unused for an amount of time. (See Appendix E: Endpoint -Policy Manager Cloud Quickstart and User Guide for more details on this.) However, there is one -caveat around a licensing scenario in which an acquired Endpoint Policy Manager Cloud license could -possibly enable the Active Directory method. Below is the breakdown of how this works. - -### Legacy Endpoint Policy Manager Cloud monthly or yearly customers: - -When clients consume licenses from Endpoint Policy Manager Cloud, they automatically pick up Group -Policy as well (for free). So if you're a Endpoint Policy Manager Cloud customer, you don't need to -also license the machine for Group Policy. Being able to use Group Policy as the settings delivery -mechanism is automatic because the client has consumed the Cloud license. In this way, you get a -free on-premise (Group Policy Edition) license automatically when a client has consumed a license -with Endpoint Policy Manager Cloud (and continues to check in within the check-in period). For -information on how to do this, see this video: -[Endpoint Policy ManagerStart Screen & Taskbar Manager: Manage non-domain joined machines using Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/methods/nondomainjoined.md). - -### Endpoint Policy Manager Professional and Endpoint Policy Manager Enterprise Edition customers: - -In this case, your Universal License key will have to be enabled for the Group Policy method. You -will not be able to automatically enable the Group Policy method when being licensed via Endpoint -Policy Manager Cloud. - -### Endpoint Policy Manager SaaS/Cloud-only customers: - -In this case, you cannot use Endpoint Policy Manager Cloud to enable the Group Policy method. If you -wish to enable the Group Policy method, you need to transition from Endpoint Policy Manager SaaS to -Endpoint Policy Manager Enterprise Edition or Endpoint Policy Manager Professional Edition. You can -still manage Active Directory joined machines, but you must use the Endpoint Policy Manager Cloud -delivery mechanism to perform the operation, and not Active Directory or a GPO. - -## Final Licensing Thoughts - -Once you've tested Endpoint Policy Manager, you'll be ready to become a part of the licensed -Endpoint Policy Manager family. The following are a few reminders on licensing: - -- Endpoint Policy Manager is licensed on a per-computer basis. -- When Endpoint Policy Manager is fully licensed, the restriction on the computer name is lifted. -- The Endpoint Policy Manager client-side extension (CSE) will not function unless it's in Trial - Mode (the computer name has the word "computer" in it) or the CSE has a time-based licensed where - the scope is correct. - -Note that you only need to install the CSE once on the client machines you want to use. When you are -unlicensed, Endpoint Policy Manager stops working. When you are licensed, it will fully process all -Endpoint Policy Manager directives. - -Volume licenses and domain-wide licenses for Endpoint Policy Manager are available. - -:::note -For an overview and FAQ of the licensing process, please visit: -[http://www.endpointpolicymanager.com/support-sharing/licensing-faq.html](http://www.endpointpolicymanager.com/support-sharing/licensing-faq.html). - -::: diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/_category_.json b/docs/endpointpolicymanager/manuals/introductionandquick/cloud/_category_.json deleted file mode 100644 index 6f9fd24261..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Endpoint Policy Manager Cloud Quick Start", - "position": 40, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/concepts/_category_.json b/docs/endpointpolicymanager/manuals/introductionandquick/cloud/concepts/_category_.json deleted file mode 100644 index 86d3f3a373..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/concepts/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Concepts, Logons, and Downloads", - "position": 30, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "concepts" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/_category_.json b/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/_category_.json deleted file mode 100644 index 3b73e8afae..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Web Interface and Controls", - "position": 50, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/_category_.json b/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/_category_.json deleted file mode 100644 index 1636674476..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Company Details", - "position": 50, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/companyadministrator/_category_.json b/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/companyadministrator/_category_.json deleted file mode 100644 index 79ed783bdb..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/companyadministrator/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Company Administrators", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/companyadministrator/generalinfo/_category_.json b/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/companyadministrator/generalinfo/_category_.json deleted file mode 100644 index 27c9fd1b31..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/companyadministrator/generalinfo/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "General Info", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/companyadministrator/generalinfo/notificationeditor.md b/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/companyadministrator/generalinfo/notificationeditor.md deleted file mode 100644 index b8be606d03..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/companyadministrator/generalinfo/notificationeditor.md +++ /dev/null @@ -1,10 +0,0 @@ ---- -title: "Notification Editor" -description: "Notification Editor" -sidebar_position: 40 ---- - -# Notification Editor - -See the topic [Edit Notification Configuration](/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/editnotificationconfiguration.md) for details -on this operation. diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/companyadministrator/generalinfo/overview.md b/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/companyadministrator/generalinfo/overview.md deleted file mode 100644 index 2b9ec6cdd3..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/companyadministrator/generalinfo/overview.md +++ /dev/null @@ -1,19 +0,0 @@ ---- -title: "General Info" -description: "General Info" -sidebar_position: 10 ---- - -# General Info - -On the **General Info** tab, you have a few actions to select from. - -![web_interface_and_controls_75_624x208](/images/endpointpolicymanager/cloud/interface/companydetails/companyadministrators/generalinfo/web_interface_and_controls_75_624x208.webp) - -The actions you can take are listed below and explained in the following sections: - -- [Change Email](/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/companyadministrator/generalinfo/changeemail.md) -- Change Password (No further information needed, therefore not addressed in the sections below.) -- [Resend Welcome Letter](/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/companyadministrator/generalinfo/resendwelcomeletter.md) -- [Login Restrictions Editor](/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/companyadministrator/generalinfo/loginrestrictionseditor.md) -- [N](/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/editnotificationconfiguration.md)[Notification Editor](/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/companyadministrator/generalinfo/notificationeditor.md)ditor diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/companyadministrator/overview.md b/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/companyadministrator/overview.md deleted file mode 100644 index 414fa65e6b..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/companyadministrator/overview.md +++ /dev/null @@ -1,22 +0,0 @@ ---- -title: "Company Administrators" -description: "Company Administrators" -sidebar_position: 20 ---- - -# Company Administrators - -For an overview of security features, including roles, watch this video: -[Endpoint Policy Manager Cloud: Immutable Log](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/security/immutablelog.md). - -Your company may have one or more administrators who share access. Those admins may have the same -roles, or different roles that enable different interactions with Endpoint Policy Manager Cloud. Any -specific admin's properties and roles can be accessed via the **Edit** button next to their name. - -![web_interface_and_controls_74_624x169](/images/endpointpolicymanager/cloud/interface/companydetails/companyadministrators/web_interface_and_controls_74_624x169.webp) - -In this window, you can specify the following: - -- General information -- Two-factor options -- Role management diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/overview.md b/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/overview.md deleted file mode 100644 index 53672575ff..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/companydetails/overview.md +++ /dev/null @@ -1,80 +0,0 @@ ---- -title: "Company Details" -description: "Company Details" -sidebar_position: 50 ---- - -# Company Details - -The **Company Details** tab has several sections. Some sections involve settings related to the look -and feel of things, but many others are security related. - -For an overview of the major Endpoint Policy Manager Cloud security features (2FA, admin roles, -notifications, IP block restrictions, etc.) check out this video: -[Endpoint Policy Manager Cloud: Security Features](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/security/features.md). - -![web_interface_and_controls_70_624x296](/images/endpointpolicymanager/cloud/interface/companydetails/web_interface_and_controls_70_624x296.webp) - -In the sections that follow,we cover the following items: - -- Company Details: name, time zone, and computer registration mode -- Login restrictions: external IPs that are allowed to connect to Endpoint Policy Manager Cloud -- Company administrators: admins who can participate in your instance of Endpoint Policy Manager - Cloud and their roles -- Downloads: additional information on downloads that was not covered in the Quickstart - -Additionally, we'll explore the actions available to us in the **Company Details** tab: - -- Add company admin -- Revoke company's certificate -- Edit notification configuration -- Customer log -- Edit customer-level portal policies -- User Requests -- Export company certificate as .PFX -- Configure Azure AD Access - -## Company Details Section - -Video: For an overview of this section, see this video: -[Endpoint Policy Manager Cloud: Strict vs. Loose Computer Registration Mode](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/registrationmode.md). - -The **Company Details** section under the **Company Details** tab allows you to change your company -display name and time zone, which is used for reporting on log files. However, the most important -setting in this section is the **Computer registration mode**, which has four options. - -![web_interface_and_controls_71_624x518](/images/endpointpolicymanager/troubleshooting/cloud/underhood/web_interface_and_controls_71_624x518.webp) - -This setting directs Endpoint Policy Manager Cloud on how to act when an endpoint computer is -already joined to Endpoint Policy Manager Cloud and attempts to re-register or claim another -license. This can occur when the client machine is wiped and reloaded with another operating system, -or when the Endpoint Policy Manager Cloud client is unloaded and then re-loaded. - -Here is how the four modes operate: - -- **Strict (always register a new computer)**- Even if Endpoint Policy Manager Cloud has seen the - hardware UUID or MAC address of the client machine before, it will always create a new secure - certificate connection, and treat the computer as if it has never been seen before. The computer - then loses any existing group membership and is always (only) assigned back to the built-in - **Unassigned** and **All** groups. -- **Loose (allow computers to recovery access by UUID)**- If a computer account already exists (and - matches by hardware UUID only) then use that existing account. If a computer is already a member - of company groups, that membership is maintained. -- **Loose (allow computers to recovery access by UUID or MAC Address)**- If a computer account - already exists (and matches by hardware UUID only, or MAC address) then use that existing account. - If a computer is already a member of company groups, that membership is maintained. -- **Advanced (always register a new computer and keep existing records)**- If a computer account - already exists (and matches by hardware UUID or MAC address) then create a new record in Endpoint - Policy Manager Cloud just as you would do in strict mode. The difference is that the record for - the previous computer is not deleted. Thus multiple computers with the same hardware can be - registered, each with their own unique record in Endpoint Policy Manager Cloud. This scenario is - useful for VDI, where the machines act identical, but you need to register each one in a new way. - -The default behavior is strict mode because it is the most secure. - -:::note -Even in loose mode, Endpoint Policy Manager Cloud still verifies the client using the x509 -certificate embedded into the MSI. Therefore, guessing the UUID or MAC address is not enough for an -unrelated person to join your Endpoint Policy Manager Cloud. - -::: diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/computergroups/_category_.json b/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/computergroups/_category_.json deleted file mode 100644 index 4449d7c65d..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/computergroups/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Computer Groups", - "position": 40, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/reports.md b/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/reports.md deleted file mode 100644 index c60965e2ca..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/reports.md +++ /dev/null @@ -1,65 +0,0 @@ ---- -title: "Reports" -description: "Reports" -sidebar_position: 70 ---- - -# Reports - -There are two reports under the **Reports** tab: **Computers (Status)** and **Policy Reports (XML -Delivery)**. These reports are discussed in the following sections. - -## Computers (Status) Report - -The **Computers (Status) Report** has several sub-reports, where you can focus in on computers with -a specific status, as shown below. This report shows a table of results with data on computers -currently connected to Endpoint Policy Manager Cloud. The following data is available: computer -name, installed OS, IP address, and computer status for Cloud. - -![web_interface_and_controls_112_624x332](/images/endpointpolicymanager/cloud/interface/web_interface_and_controls_112_624x332.webp) - -The status selector on the upper left of the table allows you to filter the results. - -Currently you can sort by thefollowin g criteria: **Acquired** (active), **Waiting List**, -**Revoked**, and **Revoked by Endpoint Policy Manager Software**. The table can be exported and -saved in MS Excel or Word format by clicking the **Save** button and selecting Excel or Word. - -![web_interface_and_controls_114_624x196](/images/endpointpolicymanager/cloud/interface/web_interface_and_controls_114_624x196.webp) - -## Policy Reports (XML Delivery) Report - -Video: For an overview of this section, check out this video: -[Endpoint Policy Manager Cloud Reporting Demo](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/reports.md) - -Policy Reports (XML Delivery) Report is a very powerful feature. This report enables you to know -which computers received which XML files. To see this report, select **Add Report**, then pick a -computer group. - -![web_interface_and_controls_115_624x355](/images/endpointpolicymanager/cloud/interface/web_interface_and_controls_115_624x355.webp) - -Next, select the scope you would like to examine. The recommended selection is **Select all XML data -files linked to this folder and all parent folders (recommended)**. - -![web_interface_and_controls_116_468x353](/images/endpointpolicymanager/cloud/interface/web_interface_and_controls_116_468x353.webp) - -You could also select the option **Select all XML data files linked ONLY to this folder**, which -could select fewer XML data files. - -![web_interface_and_controls_117_468x354](/images/endpointpolicymanager/cloud/interface/web_interface_and_controls_117_468x354.webp) - -You can also select **Manually select XML data files from XML repository** and specify specific XML -files to test for. - -Once you have created your report, it is saved for future use but not yet run. When you run your -report, it will have the following organization: - -- All the computers in the group are shown in the first column. -- All the XML files are in all other columns. - -The intersection between computer and XML file demonstrates the date and time the computer got the -most recent XML file (in green), the date and time the computer got an old version of the XML file -(in yellow), and if the XML file was not received at all (in red). - -![web_interface_and_controls_118_499x373](/images/endpointpolicymanager/cloud/interface/web_interface_and_controls_118_499x373.webp) - -This allows you to precisely knows which XML policy files were embraced by what machine and when. diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/xmldatafiles/_category_.json b/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/xmldatafiles/_category_.json deleted file mode 100644 index 0e8aed28e9..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/interface/xmldatafiles/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "XML Data Files", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/licensing/_category_.json b/docs/endpointpolicymanager/manuals/introductionandquick/cloud/licensing/_category_.json deleted file mode 100644 index efd0535150..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/licensing/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Licensing with Endpoint Policy Manager Cloud Components", - "position": 60, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/overview.md b/docs/endpointpolicymanager/manuals/introductionandquick/cloud/overview.md deleted file mode 100644 index 96acfac4d6..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/overview.md +++ /dev/null @@ -1,31 +0,0 @@ ---- -title: "Endpoint Policy Manager Cloud Quick Start" -description: "Endpoint Policy Manager Cloud Quick Start" -sidebar_position: 40 ---- - -# Endpoint Policy Manager Cloud Quick Start - -Netwrix Endpoint Policy Manager (formerly PolicyPak) Cloud is our system for delivering and -enforcing Microsoft Group Policy and all Endpoint Policy Manager special settings to -non-domain-joined, domain-joined on-prem, or remote machines. Endpoint Policy Manager Cloud enables -machines to stay protected, regardless of where they are. It is comprised of separate components to -enable you to control different types of settings. If you are in a hurry to get started, you can -start with a web browser and one Windows 10 machine and see Endpoint Policy Manager immediately in -action. - -Here's the fastest way to get started: - -**Step 1 –** Check out our **Two minute introduction** video then our Quickstart video here: Getting -Started with Cloud > [Video Learning Center](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/videolearningcenter.md). Work through the -videos one-by-one to try out all the main features. - -**Step 2 –** Additionally, we strongly recommend you have a mini on-prem test lab for editing and -testing purposes. You should work through each of the videos on the Test Lab Best Practices page and -make sure you have your free-to-use test lab working: Getting Started with Cloud > -[Video Learning Center](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/videolearningcenter.md). - -**Step 3 –** Use the rest of the manual to understand the finer points of Endpoint Policy Manager -Cloud including some key security settings. - -Enjoy Endpoint Policy Manager Cloud! diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/quickstart/_category_.json b/docs/endpointpolicymanager/manuals/introductionandquick/cloud/quickstart/_category_.json deleted file mode 100644 index f3c054e420..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/quickstart/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Setup, Download, Install, and Verify", - "position": 40, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "quickstart" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/underhood/_category_.json b/docs/endpointpolicymanager/manuals/introductionandquick/cloud/underhood/_category_.json deleted file mode 100644 index a7c6ef277c..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/underhood/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Underneath the Hood and Troubleshooting", - "position": 70, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/uninstall.md b/docs/endpointpolicymanager/manuals/introductionandquick/cloud/uninstall.md deleted file mode 100644 index 6721e87daa..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/cloud/uninstall.md +++ /dev/null @@ -1,18 +0,0 @@ ---- -title: "Endpoint Policy Manager Cloud Uninstallation" -description: "Endpoint Policy Manager Cloud Uninstallation" -sidebar_position: 80 ---- - -# Endpoint Policy Manager Cloud Uninstallation - -When the Netwrix Endpoint Policy Manager (formerly PolicyPak) Cloud client is manually uninstalled -(or the computer account is permanently deleted from within Endpoint Policy Manager Cloud), the -following happens: - -- All acquired licenses from Endpoint Policy Manager Cloud are returned to the pool (if the computer - can make contact with Endpoint Policy Manager Cloud). -- All XML data files that are in the Cloud folder are removed. -- Any Endpoint Policy Manager component will become unlicensed. Different licenses have different - behaviors when they become unlicensed. Check the KB article here for more information: - [What happens to each component when Endpoint Policy Manager gets unlicensed or the GPO or policy no longer applies?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/activedirectorygposccm/components_2.md). diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/_category_.json b/docs/endpointpolicymanager/manuals/introductionandquick/mdm/_category_.json deleted file mode 100644 index 8890b34565..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "MDM & UEM Tools", - "position": 50, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/gettingstarted.md b/docs/endpointpolicymanager/manuals/introductionandquick/mdm/gettingstarted.md deleted file mode 100644 index 9b61ea8664..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/gettingstarted.md +++ /dev/null @@ -1,79 +0,0 @@ ---- -title: "MDM and UEM Tools Quick Start" -description: "MDM and UEM Tools Quick Start" -sidebar_position: 10 ---- - -# MDM and UEM Tools Quick Start - -You might want to use Endpoint Policy Manager along with the following UEM tools: - -- MEMCM (formerly known as SCCM) (video: - [Perform Desktop Lockdown using Microsoft SCCM and Endpoint Policy Manager ](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/methods/sccmsoftwarecenter.md)) -- Microsoft Intune (video: - [Endpoint Policy Manager and Microsoft Intune](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/gettingstarted/microsoftintune.md)) -- Symantec Altiris -- Dell KACE -- LabTech -- PDQ Deploy (videos: - [Deploy and Manage Firefox with PDQ Deploy and Endpoint Policy Manager ](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/methods/pdqdeployfirefox.md) - and - [Deploy and Manage WinZip with PDQ Deploy and Endpoint Policy Manager ](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/methods/pdqdeploy.md)) -- Specops Deploy -- Microsoft Group Policy Software Installation -- Manual installation (when running with admin privileges) - -The wrapped up MSI files from Endpoint Policy Manager should work with just about any other software -distribution tool as well. Therefore, you can quickly deploy Endpoint Policy Manager directives -without needing to use Group Policy to deploy your settings. Just create the XML data file, use -Endpoint Policy Manager Exporter to make an MSI, and then use your software deployment tool of -choice to deploy the MSI. Once the MSI is delivered to the target machines, the users will pick up -the XML files in their own directories (or the Computers folder), and Endpoint Policy Manager -components will receive their directives. We've provided a handful of XML files you can use. You can -find them in the Endpoint Policy Manager Portal in the "Latest Manuals" section, as shown in -Figure 1. - -![deploying_policypak_directives](/images/endpointpolicymanager/mdm/deploying_endpointpolicymanager_directives.webp) - -Figure 1. The list of XML files in the Endpoint Policy Manager Portal. - -Once unpacked, you should see a list of example XML files, displayed in Figure 2, which are wrapped -into an example MSI. - -![deploying_policypak_directives_1](/images/endpointpolicymanager/mdm/deploying_endpointpolicymanager_directives_1.webp) - -Figure 2. The wrapped XML file example. - -The provided Endpoint Policy Manager -XML-`Examples.msi` can be used immediately and contains a -wrapped-up version of the provided XML files. Below is a summary of what each XML example does: - -- `Ppam-winzip.xml` changes settings in the Password tab of WinZip 14.0 and 14.5. -- `Ppatm-screensaver-settings.xml` sets the Windows screensaver to 17 minutes and forces the machine - to be locked when it is powered back on. -- `Ppbr-examples` makes some sample Endpoint Policy Manager Browser Router routes. Specifically, it - will route endpointpolicymanager.com to Internet Explorer, GPanswers.com to Chrome, and Mozilla.org to - Firefox, and it will block Facebook.com. -- `Pplpm-run-procmon-elevated.xml` enables Process Monitor to bypass UAC prompts and run elevated. -- P`pprefs-shortcut.xml` shows a Endpoint Policy Manager shortcut item on the desktop. -- `Ppsm-rename-guest-account.xml` renames the local Guest account to ppGuest. - -By starting your journey with our pre-configured examples, we can help you troubleshoot a lot faster -than if you try other items, so we suggest you start with these examples. - -## Quick Start with MSI files and a UEM Tool - -Below are two videos you can use to get familiar with how to export settings and then use them with -a UEM tool. - -- [Deploy Real Group Policy using SCCM or Other Management System!](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/methods/sccmgrouppolicy.md) -- Deploy Endpoint Policy Manager Settings Using SCCM or Other Management System! - -## Quick Start with MSI files and an MDM Tool - -To get started quickly with our sample MSI files and an MDM tool, we recommend watching the -following video: - -- [Endpoint Policy Manager and MDM walk before you run](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/gettingstarted/testsample.md) - -Then, you can learn more about how to use Endpoint Policy Manager with your own MDM tool on this -page: Getting Started with MDM > [Video Learning Center](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/videolearningcenter.md). diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/overview.md b/docs/endpointpolicymanager/manuals/introductionandquick/mdm/overview.md deleted file mode 100644 index cd7d42d976..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/overview.md +++ /dev/null @@ -1,68 +0,0 @@ ---- -title: "MDM & UEM Tools" -description: "MDM & UEM Tools" -sidebar_position: 50 ---- - -# MDM & UEM Tools - -Deploying PolicyPak Directives without Group Policy - -If you're reading this section, you're likely interested in using Netwrix Endpoint Policy Manager -(formerly PolicyPak) in conjunction with Microsoft Endpoint Configuration Manager (MEMCM) (formerly -known as SCCM), Microsoft Intune, KACE, or your own systems management utility. The bullet points -below give the general idea of how you can use PolicyPak with these utilities. - -- All Endpoint Policy Manager components can export their settings as XML files. -- Those XML files can be imported into the Endpoint Policy Manager Exporter. -- The Endpoint Policy Manager Exporter makes MSI files. -- Those MSI files can be delivered using any technique you want: - - - Using an mobile device management (MDM) provider like: Microsoft Intune, VMware Workspace ONE, - etc. - - Using an unified endpoint management (UEM) tool like: SCCM, KACE, and so on. - -Therefore, you can deliver your settings to any machine with all the Endpoint Policy Manager -components (Endpoint Policy Manager Least Privilege Manager, Endpoint Policy Manager Application -Settings Manager, Endpoint Policy Manager Browser Router, Endpoint Policy Manager File Associations -Manager, Endpoint Policy Manager Preferences Manager, Endpoint Policy Manager Security Settings -Manager, and all the others) without using Group Policy as the delivery mechanism. - -:::note -For an overview of using Endpoint Policy Manager Exporter with the Endpoint Policy Manager -components, please see the following video: -[Deploying Endpoint Policy Managerdirectives without Group Policy (Endpoint Policy Manager Exporter Utility)](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/methods/exporterutility.md). -::: - - -:::warning -Note that non-domain-joined machines are not supported with Endpoint Policy Manager -products, unless you are using the MDM method. That is, the machine must have been previously -domain-joined and be in an organizational unit (OU) that is licensed (or will be licensed from a -licensing file). To deliver settings to non-domain-joined machines, you must use Endpoint Policy -Manager Cloud. -::: - - -In the next sections, we're going to work through the following procedures: - -- Exporting settings from each Endpoint Policy Manager application as an XML file -- Using the Endpoint Policy Manager Exporter utility to make an MSI file -- Learning what happens after the MSI file is delivered - -## Reasons to Use XML Data Files to Deliver Settings - -There are a variety of scenarios in which you might not> want to use Group Policy to deliver -Endpoint Policy Manager directives, including the following: - -- You are using MEMCM, LANDesk, KACE, or similar software for software deployment, and your team - doesn't want to use Group Policy, but wants to use the components and functionality of Endpoint - Policy Manager. -- You are using a mobile device management (MDM) service such as Microsoft Intune, MobileIron, or - VMware Workspace ONE (formerly known as AirWatch). -- You have clients who have a domain-joined account but haven't been to the office to get the Group - Policy settings. -- You have a special machine that is domain-joined, but you don't want it to get Group Policy. - Instead, you want it to get some Endpoint Policy Manager directives. -- You are using Microsoft Intune or another remote management system to manage machines, and you - want to add Group Policy functionality, but that utility doesn't have Group Policy functionality. diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/tips/_category_.json b/docs/endpointpolicymanager/manuals/introductionandquick/mdm/tips/_category_.json deleted file mode 100644 index bc2b096c7b..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/tips/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Endpoint Policy Manager Exporter Tips, Tricks, and Notes", - "position": 40, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/_category_.json b/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/_category_.json deleted file mode 100644 index 7e225153ac..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Using Endpoint Policy Manager with MDM and UEM Tools", - "position": 30, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "uemtools" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/mdm/_category_.json b/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/mdm/_category_.json deleted file mode 100644 index d99d77b5ca..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/mdm/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Troubleshooting", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/service/_category_.json b/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/service/_category_.json deleted file mode 100644 index 3769127e2c..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/service/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Using Endpoint Policy Manager with any MDM Service", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/service/overview.md b/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/service/overview.md deleted file mode 100644 index aeee4cc927..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/service/overview.md +++ /dev/null @@ -1,90 +0,0 @@ ---- -title: "Using Endpoint Policy Manager with any MDM Service" -description: "Using Endpoint Policy Manager with any MDM Service" -sidebar_position: 10 ---- - -# Using Endpoint Policy Manager with any MDM Service - -You can use Endpoint Policy Manager with any MDM service you already have, like Intune, VMware -Workspace ONE (formerly Airwatch), MobileIron, etc. Below we see a systems hierarchical breakdown -when using Endpoint Policy Manager with any MDM system. - -![using_policypak_with_mdm_and_1](/images/endpointpolicymanager/mdm/service/using_endpointpolicymanager_with_mdm_and_1.webp) - -:::note - -[Deploying Real Group Policy (and Extra Endpoint Policy Manager Settings) Overview](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/gettingstarted/realgrouppolicy.md)a -video overview of Endpoint Policy Manager and MDM. -::: - - -The ultimate goal is to upload the following Endpoint Policy Manager items to your MDM service and -then have them downloaded: - -- Endpoint Policy Manager MSI client -- Endpoint Policy Manager MDM license MSI -- Endpoint Policy Manager example MSI (or your own MSIs) - -However, we strongly recommend you first verify that the license and MSI files are working perfectly -before actually performing all these steps. Therefore, our recommendation would be as follows: - -On one machine proceed in the following manner: - -**Step 1 –** Join MDM. - -**Step 2 –** Install Endpoint Policy Manager MSI by hand. - -**Step 3 –** Install Endpoint Policy Manager licenses MSI by hand. - -**Step 4 –** Install Endpoint Policy Manager example policies MSI by hand. - -This will ensure all the correct parts are working in concert before you attempt to use an MDM -service to deliver these components. - -:::note -See [Endpoint Policy Manager and MDM walk before you run](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/gettingstarted/testsample.md) a -video of this process. -::: - - -Once you've completed these procedures, you're ready to actually perform the steps needed to get the -files deployed using your MDM service. The ultimate result and goal will be that the Endpoint Policy -Manager MSI client, the Endpoint Policy Manager MDM license MSI, and the Endpoint Policy Manager -examples (or your own wrapped up examples) are downloaded from your MDM service and installed on the -system. - -Optionally, you can view or hide these components by using the Add/Remove Programs applet in the -Control Panel. An example of a final deployment would look something like this: - -![using_policypak_with_mdm_and_2](/images/endpointpolicymanager/mdm/service/using_endpointpolicymanager_with_mdm_and_2.webp) - -The typical command you want your MDM service to run for each component would be something like -this: - -``` -msiexec /i "PolicyPak Client-side extension x64.msi" /qn ARPSYSTEMCOMPONENT=1 -``` - -``` -msiexec /i "endpointpolicymanager-Exported-Settings.msi" /qn ARPSYSTEMCOMPONENT=1 -``` - -``` -msiexec /i "Fabrikam-License1.msi" /qn ARPSYSTEMCOMPONENT=1 -``` - -It should be noted that: - -- The `/qn` flag runs the MSI silently. -- The `/ARPSYSTEMCOMPONENT=1` is optional and will hide the deployed MSI from Add/Remove Programs so - users or admins won't see it installed or try to remove it. - -:::note -The name of the actual license file you get might be somewhat different. -::: - - -The next three sections discuss a few setup tips and tricks for Microsoft Intune MDM, MobileIron -MDM, and VMware Workspace ONE MDM. The setup steps may vary a little from what is listed in the next -few sections, but they are the basic steps for each of the major services. diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/xmldatafiles/_category_.json b/docs/endpointpolicymanager/manuals/introductionandquick/mdm/xmldatafiles/_category_.json deleted file mode 100644 index 00a528cecf..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/xmldatafiles/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Exporting Directives as XML Data Files", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/xmldatafiles/overview.md b/docs/endpointpolicymanager/manuals/introductionandquick/mdm/xmldatafiles/overview.md deleted file mode 100644 index 499a374235..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/xmldatafiles/overview.md +++ /dev/null @@ -1,159 +0,0 @@ ---- -title: "Exporting Directives as XML Data Files" -description: "Exporting Directives as XML Data Files" -sidebar_position: 20 ---- - -# Exporting Directives as XML Data Files - -Creating Endpoint Policy Manager XML data files is easy. But each Endpoint Policy Manager component -has a slightly different way to make and export XML data files. The XML data files you export can -then be used with Endpoint Policy Manager Exporter (with MEMCM, KACE, Microsoft Intune, etc.) or -with Endpoint Policy Manager Cloud. We will discuss these processes in the following sections. Note -that instructions are not included for all components. We've provided a representative sample of -most of the components, and most will export in a similar way. All the exceptions are noted here, -however, like Admin Templates Manager, Application Settings Manager, and Security Settings manager, -which are somewhat different than the others. - -:::note -For a video overview of how to wrap up XML data and license files into MSI files, see the -following link: -[Deploying Endpoint Policy Managerdirectives without Group Policy (Endpoint Policy Manager Exporter Utility)](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/exportingtips/exporterutility.md). -::: - - -Now that you have your XML data files, you're ready to bundle them up and make them into an MSI for -easy deployment using any software distribution utility, such as Microsoft Endpoint Configuration -Manager (MEMCM), Microsoft Intune, MobileIron, VMware Workspace ONE, KACE, LANDesk, or anything else -that uses MSI files. - -**Step 1 –** When you install the Endpoint Policy Manager Admin Console MSI, you automatically -install the Endpoint Policy Manager Exporter utility. In order to launch it, locate the utility's -icon in the Start menu within Endpoint Policy Manager Application Settings Manager, as shown in -Figure 3. - -![deploying_policypak_directives_2](/images/endpointpolicymanager/mdm/xmldatafiles/deploying_endpointpolicymanager_directives_2.webp) - -Figure 3. The Endpoint Policy Manager Exporter utility icon in the Start menu. - -This utility enables you to do any of the following: - -- Create new Endpoint Policy Manager Application Settings Manager XML data files -- Use existing XML data files from all Endpoint Policy Manager products -- Use Endpoint Policy Manager licensing files -- Map which XML data files should be installed for which users on target machines -- Open existing MSI files you previously created and quickly edit and enable modifications and - upgrades - -In this demonstration of Endpoint Policy Manager Exporter, we'll assume you have a collection of -Endpoint Policy Manager XML data files or a Endpoint Policy Manager licensing file you want to wrap -up into an MSI file for easy deployment. Let's assume you had the following XML data files (as shown -in Table 1) and wanted to ensure that the following users received the directives when logging on to -specific machines. - -Table 1: Example files. - -| File Name | File Type | Users Receiving the File | -| ----------------------------------- | ------------------------------------------------------------------ | ------------------------------------------------------ | -| WinZip1.xml | Endpoint Policy Manager Application Settings Manager XML data file | EastSalesUser1, EastSalesUser2, Active Directory users | -| FireFox1.xml | Endpoint Policy Manager Application Settings Manager XML data file | Computer (All Users) | -| Enforce Default Browser.xml | Endpoint Policy Manager Browser Router Manager XML data file | Computer (All Users) | -| Control Panel Settings.xml | Endpoint Policy Manager Admin Templates Manager XML data file | Computer (All Users) | -| Important Security Settings.xml | Endpoint Policy Manager Security Settings Manager XML data file | Computer (All Users), forced | -| Fabrikam.Local-License-Key-file.xml | Endpoint Policy Manager license file | Computer (All Users), forced | - -When Endpoint Policy Manager Exporter is launched, you'll be able to perform the actions shown in -Figure 4. - -![deploying_policypak_directives_3](/images/endpointpolicymanager/mdm/xmldatafiles/deploying_endpointpolicymanager_directives_3.webp) - -Figure 4. The Endpoint Policy Manager Exporter tool helps the user create XML data files and package -the files into an MSI installer. - -**Step 2 –** Endpoint Policy Manager Exporter will create MSIs from your existing XML data files and -Endpoint Policy Manager licensing files or open up an existing MSI that you created earlier using -this tool. For now, select "Create a new MSI installer." Then, you'll see the option, "Add Existing -Files," as shown in Figure 5. - -![deploying_policypak_directives_4](/images/endpointpolicymanager/mdm/xmldatafiles/deploying_endpointpolicymanager_directives_4.webp) - -Figure 5. The option to add existing files. - -The "Add Existing Files" button lets you bring in the following types of files: - -- Any Endpoint Policy Manager XML data files (such as from Endpoint Policy Manager Application - Settings Manager, Endpoint Policy Manager Browser Router, Endpoint Policy Manager Least Privilege - Manager, etc.) -- Microsoft Group Policy Preferences XML data files -- Microsoft Security Group Policy settings exported as XML data files using Endpoint Policy Manager - Security Settings Manager -- Microsoft Admin Template settings exported using Endpoint Policy Manager Admin Templates Manager -- Endpoint Policy Manager licensing files for Endpoint Policy Manager and the Endpoint Policy - Manager Group Policy Compliance Reporter - -With Endpoint Policy Manager Exporter you can wrap these up into an MSI. In Figure 6, we have added -a variety of exported XML settings. - -![deploying_policypak_directives_5](/images/endpointpolicymanager/mdm/xmldatafiles/deploying_endpointpolicymanager_directives_5.webp) - -Figure 6. Exported XML settings. - -:::note -You cannot add more than one licensing file of the same product type to an MSI project. -::: - - -**Step 3 –** Next, you can dictate which files will be delivered to which users, or to Computer (All -Users). - -:::note -For MDM and Endpoint Policy Manager Cloud scenarios, it's common to specify the settings -affecting Computer (All Users), so you can guarantee that whoever is on the machine will get the -settings. -::: - - -**Step 4 –** By default, newly added XML data files will be delivered to all users, as shown in -Figure 7. This means the settings get delivered to the Computer side, and the result is that all -users must receive the settings. However, in our example, we want the WinZip1.xml file to be -delivered to EastSalesUser1 and EastSalesUser2. Therefore, use the dropdown menu under "Install -For," and change it from "Computer" to "Users & Groups." After you do this, the Target column -populates with "0 Users," as illustrated in Figure 7. - -![deploying_policypak_directives_6](/images/endpointpolicymanager/mdm/xmldatafiles/deploying_endpointpolicymanager_directives_6.webp) - -Figure 7. Selecting which group will get the XML data files. - -**Step 5 –** Click on "0 Users" to specify the users you want the WinZip1.xml file to work with. In -the Select Users or Groups dialog, click "Add Users / Groups," and specify the users (or groups) you -want this XML data file to apply to (see Figure 8). Then click "OK." - -![deploying_policypak_directives_7](/images/endpointpolicymanager/mdm/xmldatafiles/deploying_endpointpolicymanager_directives_7.webp) - -Figure 8. Selecting the targeted users. - -Notice that `theWinZip1.xml` file is now set to be delivered to two users (see Figure 9). You can -also specify Active Directory groups instead of just users. To help specify these types of users, -the Target column will express how many users and how many groups are being targeted. - -![deploying_policypak_directives_8](/images/endpointpolicymanager/mdm/xmldatafiles/deploying_endpointpolicymanager_directives_8.webp) - -Figure 9. The Target column shows how many users and how many groups are being targeted. - -:::note -Licensing files are always set to deliver to all users. -::: - - -**Step 6 –** You can repeat the process by clicking on "Create New PPAM XMLdata File" or "Add -Existing Files" and then specifying which users you want the directives to apply to. When you are -done, click "Next" to continue. This will initiate the Installer Properties page where you can name -the MSI and manufacturer however you wish (as shown in Figure 10). - -![deploying_policypak_directives_9](/images/endpointpolicymanager/mdm/xmldatafiles/deploying_endpointpolicymanager_directives_9.webp) - -Figure 10. Naming the MSI. - -**Step 7 –** When you click "Next" in the Installer Properties page, you will be prompted to save -your MSI file. If you need it later, the MSI file can be opened and edited again (see the section -"Modifying Existing MSI files with Endpoint Policy Manager Exporter"). diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/xmldatafiles/preferences.md b/docs/endpointpolicymanager/manuals/introductionandquick/mdm/xmldatafiles/preferences.md deleted file mode 100644 index 94f65b80f8..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/mdm/xmldatafiles/preferences.md +++ /dev/null @@ -1,28 +0,0 @@ ---- -title: "XML Data Files from Endpoint Policy Preferences Manager" -description: "XML Data Files from Endpoint Policy Preferences Manager" -sidebar_position: 70 ---- - -# XML Data Files from Endpoint Policy Preferences Manager - -To make an XML file from a Group Policy Preference item, first create the item. Be sure to embed any -Group Policy Preference Item-Level Targeting within your item to limit when the item will apply. For -instance, you may want to limit by operating system, IP address range, the presence of a file, and -so on. Refer to Book 9: [Preferences Manager](/docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/overview.md), for more details. -Then, drag the Group Policy Preference item from the MMC console to create the XML data file. You -can drag this file to a folder or your desktop, as shown in Figure 19. - -![deploying_policypak_directives_19](/images/endpointpolicymanager/mdm/xmldatafiles/deploying_endpointpolicymanager_directives_19.webp) - -Figure 19. Dragging the the Group Policy Preference item from the MMC console to the desktop in -order to create a XML data file. - -Alternatively, the Endpoint Policy Manager management console can also export existing Group Policy -Preference items from within an existing GPO (without you needing to drag and drop items one by -one). You can see an example of this in Figure 20. - -![deploying_policypak_directives_20](/images/endpointpolicymanager/mdm/xmldatafiles/deploying_endpointpolicymanager_directives_20.webp) - -Figure 20. The user can export an existing GPO through the Endpoint Policy Manager management -console. diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/_category_.json b/docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/_category_.json deleted file mode 100644 index c4f5a1776c..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Installation Quick Start", - "position": 30, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overviewinstall" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/preparemanagementsta/_category_.json b/docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/preparemanagementsta/_category_.json deleted file mode 100644 index d8552c3299..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/preparemanagementsta/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Step 3: Prepare a management station to create Endpoint Policy Manager policies", - "position": 30, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "preparemanagementstation" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/quickstart/_category_.json b/docs/endpointpolicymanager/manuals/introductionandquick/quickstart/_category_.json deleted file mode 100644 index 45b98b0e17..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/quickstart/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Netwrix Endpoint Policy Manager Quick Start", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/quickstart/cloud.md b/docs/endpointpolicymanager/manuals/introductionandquick/quickstart/cloud.md deleted file mode 100644 index 64ea26e711..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/quickstart/cloud.md +++ /dev/null @@ -1,56 +0,0 @@ ---- -title: "Endpoint Policy Manager Cloud Delivery Quick Start" -description: "Endpoint Policy Manager Cloud Delivery Quick Start" -sidebar_position: 30 ---- - -# Endpoint Policy Manager Cloud Delivery Quick Start - -For an overview of delivery via PolicyPak Cloud, see the -[Endpoint Policy Manager Cloud: QuickStart](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/quickstart.md) video . - -Follow the steps below to carry out the Endpoint Policy Manager cloud delivery: - -**Step 1 –** Install the Endpoint Policy Manager Cloud Client on an example endpoint - -Log on to [cloud.endpointpolicymanager.com](http://cloud.endpointpolicymanager.com/) with the credentials provided to you -via email from Netwrix sales. In the Company tab download the PolicyPak Cloud Client MSI for your -PolicyPak Cloud tenant. - -Install it by hand on a few Windows 10 or Windows 11 endpoints. Alternatively, use your software -deployment tool (like Intune) to deliver the CSE to a few endpoints. See the -[Endpoint Policy Manager Cloud + MDM Services: Install Cloud Client + automatically join PPC Groups and get policy.](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/usingwithothermethods/mdm.md) -video of using Intune to bootstrap the PolicyPak cloud client install. - -The Endpoint Policy Manager Cloud Client automatically installs the PolicyPak CSE at the same time. - -:::note -Each time you install the Endpoint Policy Manager Cloud Client you will consume one of -your 10 example licenses -::: - - -**Step 2 –** (optional, recommended): Install the Endpoint Policy Manager Admin Console on a -management machine with the GPMC pre-installed - -In the download, find the **Admin Console MSI**. Install it by hand on your machine. Your machine -needs to also have the GPMC pre-installed from Microsoft. We recommend you have both the Endpoint -Policy Manager Admin Console and the GPMC installed on a “fake DC” exclusively for editing purposes. -See the [How to create a DC for editing purposes](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/testlabbestpractices/createdc.md) video for -details and how to do this. - -:::note -If you bypass this step, you can still use the Endpoint Policy Manager in-cloud editors, -but some options may not be available to you for editing without an on-prem editor station. -::: - - -**Step 3 –** Start creating policies using Endpoint Policy Manager Cloud - -If you want to make Microsoft Group Policy settings via Endpoint Policy Manager Cloud, see the -[Endpoint Policy ManagerCloud: How to deploy Microsoft Group Policy Settings using Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/grouppolicysettings.md)video. - -If you want to make Endpoint Policy Manager specific settings (like Endpoint Policy Manager Least -Privilege Manager, etc.) via Endpoint Policy Manager Cloud, see the -[Endpoint Policy ManagerCloud: How to deploy Endpoint Policy Manager specific settings (using in-cloud editors and exporting from on-prem)](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/endpointpolicymanagersettings.md) -video. diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/quickstart/overview.md b/docs/endpointpolicymanager/manuals/introductionandquick/quickstart/overview.md deleted file mode 100644 index 6e5e37cc84..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/quickstart/overview.md +++ /dev/null @@ -1,23 +0,0 @@ ---- -title: "Netwrix Endpoint Policy Manager Quick Start" -description: "Netwrix Endpoint Policy Manager Quick Start" -sidebar_position: 20 ---- - -# Netwrix Endpoint Policy Manager Quick Start - -Getting Started - -First, download the Netwrix Endpoint Policy Manager (formerly PolicyPak) software from the portal at -endpointpolicymanager.com. See the -[Endpoint Policy ManagerPortal: How to download Endpoint Policy Manager and get free training](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/gettingstartedmisc/freetraining.md) -topic for video details on downloading. - -Next, Netwrix Endpoint Policy Manager (formerly PolicyPak) enables you to deliver settings via Group -Policy, MDM or PolicyPak Cloud. - -:::info -Use Group Policy for your Quick Start. However, any delivery method may be used -as appropriate. - -::: diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/upgrade/_category_.json b/docs/endpointpolicymanager/manuals/introductionandquick/upgrade/_category_.json deleted file mode 100644 index 11fc712c63..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/upgrade/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Upgrade Guidance", - "position": 60, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/upgrade/overview.md b/docs/endpointpolicymanager/manuals/introductionandquick/upgrade/overview.md deleted file mode 100644 index 7a5c702c14..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/upgrade/overview.md +++ /dev/null @@ -1,56 +0,0 @@ ---- -title: "Upgrade Guidance" -description: "Upgrade Guidance" -sidebar_position: 60 ---- - -# Upgrade Guidance - -How to Stay Supported - -Only the latest client-side extension (CSE) in the Portal or Netwrix Endpoint Policy Manager -(formerly PolicyPak) Cloud, the one with the most fixes and features, is fully supported. - -:::note -To better understand Endpoint Policy Manager build and version numbers, see the -[What are the Endpoint Policy Manager Build and Version numbers?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/bestpractices/versions.md) -topic for additional information. -::: - - -Just because you are unable to stay current (or nearly current) with the Endpoint Policy Manager CSE -rollouts, does not mean that you lose support. You are always supported, regardless of the CSE -version you have on your machine. However, if you find a bug, problem, inconsistency, or other -issue, then Endpoint Policy Manager support will direct you to update (at least) one machine with -the very latest CSE on it for investigation. We will also ask for log files from that machine after -you have reproduced the issue. In other words, as a general rule, we will typically not begin to -investigate your issue unless you can reproduce it on a machine with the latest CSE. There is no -value in investigating old CSE behavior because the problem could already be fixed in the latest -version, and logging improvements could be present in the latest CSEs. Additionally, if your request -involves us investigating the log files, similarly, we will not ask for nor investigate any log -files unless the problem is reproducible on the latest CSE. - -From a practical perspective, you should attempt to have your Windows 10 machines on a CSE that was -shipped at least within the last full year. Six months is better, and three months is even better. -Upgrades should go smoothly from any CSE to any other CSE, but those are not expressly tested. We -only test the previous CSE to current CSE upgrade path. Therefore, when you stay as close to our -currently shipping CSE as possible, you're likely going to get the best experience, latest testing, -and fewest problems overall.A best practice is to stay up to date on the latest version available. - -Furthermore, because corporate PCs are typically full of applications, system software, and possibly -other unusual circumstances, we strongly recommend you have at least one clean machine for ongoing -testing. A clean machine would have the following installed: - -- Latest version of Windows 10 -- Latest version of Microsoft Edge -- Latest version of Chrome or other browsers -- Onlysoftware that Endpoint Policy Manager might be controlling, such as that required with - Endpoint Policy Manager Application Settings Manager, Endpoint Policy Manager Least Privilege - Manager, Endpoint Policy Manager Start Screen & Taskbar Manager, etc. -- Not much else, and specifically, no third-party system software or A/V software other than - Endpoint Policy Manager. - -This way you can install the latest Endpoint Policy Manager CSE by hand and do some testing of a new -CSE before you attempt to roll it out to more client machines. Then, if you encounter a bug, you can -quickly validate your bug report and collect logs from a machine that is available whenever you need -it, not just when the user is available. diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/upgrade/rings/_category_.json b/docs/endpointpolicymanager/manuals/introductionandquick/upgrade/rings/_category_.json deleted file mode 100644 index afc1d72c9a..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/upgrade/rings/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Understanding Rings", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/upgrade/rings/cloud.md b/docs/endpointpolicymanager/manuals/introductionandquick/upgrade/rings/cloud.md deleted file mode 100644 index c4e3874410..0000000000 --- a/docs/endpointpolicymanager/manuals/introductionandquick/upgrade/rings/cloud.md +++ /dev/null @@ -1,40 +0,0 @@ ---- -title: "Rings with Endpoint Policy Manager Cloud" -description: "Rings with Endpoint Policy Manager Cloud" -sidebar_position: 10 ---- - -# Rings with Endpoint Policy Manager Cloud - -In Endpoint Policy Manager Cloud, because the concept of groups is already used, you can consider a -Endpoint Policy Manager Cloud group like a ring. You can choose a group and manually specify to use -a particular version of the CSE on that group. You can also specify to use a particular version of -the CSE or Cloud Client everywhere (using the special "ALL" groups). Therefore, the following steps -are recommended: - -**Step 1 –** Set up a group of 2–5% of your computers. When a new CSE or Cloud Client is released, -you should opt in and use this group to start testing and verify success. If there is a problem, you -can raise it to the Endpoint Policy Manager support team and we will work with you. - -**Step 2 –** If all goes well, you can roll out the latest CSE and/or Cloud Client to more Endpoint -Policy Manager Cloud groups. It only takes one click within the group to select the CSE or Cloud -Client version. Your target rollout for the new CSE and/or Cloud Client should be around 30–50% of -your Windows machines. If an issues occurs, you can raise it to the support team and we willl work -with you. - -**Step 3 –** After you have rolled out to 50% of your machines, you should be confident enough to -roll it out to all machines. When ready, pick the remaining Endpoint Policy Manager Cloud groups and -select the latest CSE and/or Endpoint Policy Manager Cloud client to opt-in more groups. - -**Step 4 –** Alternatively, use the special **All** group to finish your upgrade and mass upgrade -the remaining PCs all at once (after completing some testing). - -See the -[Endpoint Policy Manager Cloud Groups CSE and Cloud Client Small-Scale Testing and Updates](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/groups.md) -topic for additional information on this process. - -:::note -Update the CSE first or the Cloud Client first in the test groups and let each part of the -software update. Upgrading both at the same time is supported but is not recommended. - -::: diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/_category_.json b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/_category_.json deleted file mode 100644 index 5c611524c4..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Least Privilege Security Pak", - "position": 20, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/_category_.json b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/_category_.json deleted file mode 100644 index 947f9f740b..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Least Privilege Manager (Windows)", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/adminapproval/_category_.json b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/adminapproval/_category_.json deleted file mode 100644 index 4f2d7baaad..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/adminapproval/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Admin Approval", - "position": 40, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/adminapproval/gettingstarted/_category_.json b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/adminapproval/gettingstarted/_category_.json deleted file mode 100644 index b2177c64fc..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/adminapproval/gettingstarted/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Getting Started with Admin Approval", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "gettingstarted" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/adminapproval/gettingstarted/gettingstarted.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/adminapproval/gettingstarted/gettingstarted.md deleted file mode 100644 index 24e8367e9d..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/adminapproval/gettingstarted/gettingstarted.md +++ /dev/null @@ -1,70 +0,0 @@ ---- -title: "Getting Started with Admin Approval" -description: "Getting Started with Admin Approval" -sidebar_position: 10 ---- - -# Getting Started with Admin Approval - -If there’s no Endpoint Policy ManagerLeast Privilege Manager rule to automatically elevate an -application (or allow it to bypass SecureRun™), the user is prompted with a special dialog to -request access. - -:::note -See the [Admin Approval demo](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/demo.md) video for -Endpoint Policy Manager (formerly PolicyPak) Least Privilege Manager Admin Approval mode setup and -in action. -::: - - -Endpoint Policy Manager (formerly PolicyPak) Least Privilege Managerr’s Admin Approval works as if -the person with the Admin Approval Tool has a shared secret, which is a secret key that is deployed -to the computer. - -There are three parts to Admin Approval: - -- The Endpoint Policy Manager (formerly PolicyPak) Least Privilege Manager policies, which establish - Admin Approval and its secret key -- Securing the secret key (if using Group Policy method) -- The Endpoint Policy Manager (formerly PolicyPak) Least Privilege Manager Admin Approval Tool - -:::note -The secret key must be delivered to the computer. You cannot deploy the key to the user. -You could have one secret key for all computers and all admins, or you could have a secret key for -only some computers and some admins. -::: - - -Admin Approval will show the user the Endpoint Policy Manager Admin Approval prompt instead of the -Windows UAC prompt when any of the following conditions are true: - -- The app is marked as requiring elevation by its developer (in the app manifest). You can see these - applications easily because they typically show a Windows shield graphic in the application’s - icon. -- The app is a legacy installer. This is defined by both Windows and Endpoint Policy Manager as a - 32-bit app without an app manifest and with one of special "setup" keywords (such as install, - setup, and so on) in its file info. -- The app is any installer and Endpoint Policy Manager ’s Admin Approval **Enforce Admin Approval - for all installers** option is enabled (explained later). -- Endpoint Policy Manager SecureRun™ is enabled, and the executable is run by someone not on the - SecureRun™ list. -- The user right-clicks a file and selects **Run with Endpoint Policy Manager**. - -For complete clarity, there are times when the user will still see a standard Windows UAC prompt and -not a PolicyPak Admin Approval prompt. These instances include: - -- When a COM interface used by the app requires elevation (for instance, the network settings - dialog). -- When one process creates another process and forces Windows to show the UAC prompt, as in one of - the following instances: - - - When a user is running Acrobat Reader as a Standard User and tries to change the upgrade - behavior. In this case, a standard Windows UAC prompt will show. - - If a user attempts to run an application like Procmon; this is because it’s attempting to load - a device driver, the standard Windows UAC prompt will show. - -- When an installer shows the standard UAC prompt. For instance, the Chrome installer doesn't - require admin rights (as it can install Chrome per user into %localappdata%). Regardless, the - Chrome installer shows a UAC prompt to see if a user can or wants to install Chrome for all users. - To help work around this issue, we provide the **Enforce Admin Approval for all installers** - option, which is explained later. diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/adminapproval/useemail.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/adminapproval/useemail.md deleted file mode 100644 index 05bcfe3c66..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/adminapproval/useemail.md +++ /dev/null @@ -1,63 +0,0 @@ ---- -title: "Using Email for Admin Approval" -description: "Using Email for Admin Approval" -sidebar_position: 30 ---- - -# Using Email for Admin Approval - -If needed, you can use email to authorize items using Endpoint Policy Manager (formerly PolicyPak) -Least Privilege Manager. This way, users can click a link that automatically emails the Helpdesk or -ServiceNow or support personnel, rather than initiating a phone call. Using the same Admin Approval -policy we created earlier, open the policy up and click on the **Email** tab. Change the **Use of -email** field to **Enabled** and insert an email address that will handle the admin approvals. - -:::note -See the [Using Email / Long Codes](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/longcodes.md) video for -using email for Admin Approval. -::: - - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/adminapproval/using_email_for_admin_approval.webp) - -The two options are: - -- Always use email (only) - Will not show a shortcode in the Admin Approval Dialog. -- Open the message in Notepad instead - Instead of opening an email, it will open in Notepad. This - is useful if you don’t have any locally installed email client and wish to copy / paste the - details into Gmail, Office 365 Web mail, or similar. See the - [Endpoint Privilege Manager: Admin Approval Email method (with Notepad instead)](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/email.md) - video for a demonstration. - -Now when users click on an install or run an application, they receive a slightly different prompt. - -Below you can see the long response code now required, instead of the short response code. Users -will click the **Send a request mail to my support** link, which will automatically send the -approval request using their email application. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/adminapproval/using_email_for_admin_approval_1.webp) - -Here you can see the generated email containing the request code. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/adminapproval/using_email_for_admin_approval_2.webp) - -When the email is received, a support admin can copy the request code and paste it into the Admin -Approval Tool. Once pasted into the tool, all of the task information about the application appears -just as it was when using the short request code process. - -You can then check the item using VirusTotal (optional) and get the response code copied to clip -board and/or send an email back to the user. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/adminapproval/using_email_for_admin_approval_3.webp) diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/apply/_category_.json b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/apply/_category_.json deleted file mode 100644 index c34369999f..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/apply/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Apply on Demand Rules and Self-Elevation Rules", - "position": 30, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/apply/ondemand.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/apply/ondemand.md deleted file mode 100644 index 5cea8e23ac..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/apply/ondemand.md +++ /dev/null @@ -1,61 +0,0 @@ ---- -title: "Apply on Demand Rules" -description: "Apply on Demand Rules" -sidebar_position: 10 ---- - -# Apply on Demand Rules - -:::note -See the -[Least Privilege Manager: Apply On Demand](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/applyondemand.md) video for -information on Endpoint Policy ManagerLeast Privilege Manager Apply on Demand. -::: - - -The Apply on Demand feature enables advanced users to know when they should self-elevate their own -situations and programs. Up until now, each rule was automatically applied when a user tried to run -an application. - -When Apply on Demand is selected within a policy (see screenshot below), this policy no longer -applies automatically. This is useful in a lot of cases with developer applications where they can -run non-elevated and work nearly all the time, but perhaps only occasionally need elevation some of -the time. - -For this example, re-open and edit the policy that performs automatic elevation for Process Monitor, -and set the action to **Apply on Demand**. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/rules/apply/apply_on_demand_rules.webp) - -The result of this change (after running GPupdate) is that when the end-user tries to run Procmon, -they will see the standard UAC prompt. - -Now that you have selected Apply on Demand, when the rule applies, the application will no longer -automatically honor the rule you have set up. Double-clicking the application will now yield a UAC -prompt (if the application requires UAC), like the one shown here. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/rules/apply/apply_on_demand_rules.webp) - -The user will now need to right-click the application and choose **Run with Endpoint Policy Manager -On-Demand**. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/rules/apply/apply_on_demand_rules_1.webp) - -:::note -You can change the name of the menu item from **Run with** Endpoint Policy Manager -**On-Demand** via Global Settings Policy.. See the -[Best Practices and Miscellaneous Topics](/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/overviewmisc.md) topic for additional -information on Global Settings Policy. -::: - - -When the user does this, the application launches, bypassing the UAC prompt. diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/apply/selfelevation.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/apply/selfelevation.md deleted file mode 100644 index 307c0ce603..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/apply/selfelevation.md +++ /dev/null @@ -1,112 +0,0 @@ ---- -title: "Self-Elevation Rules" -description: "Self-Elevation Rules" -sidebar_position: 20 ---- - -# Self-Elevation Rules - -:::note -See the -[Endpoint Policy Manager Least Priv Manager: Self Elevate Mode](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/selfelevatemode.md) -video for information on Endpoint Policy Manager Least Privilege Manager self-elevation rules. -::: - - -There is a self-elevation mode for special situations as well. Although this mode is normally not -recommended, as it makes your systems more vulnerable, there may be a special circumstance in which -you want to grant a designated user local admin-like rights, without making them an admin. - -You may have particular users which need to run EXE or MSI applications at will, but to whom you -don't want to give local admin rights. For instance: - -- Your IT personnel need the ability to install MSIs elevated and to access privileged applications - such as Process Monitor. -- Your developers constantly create and test new scripts so they need to run them elevated when - needed. -- Your HR personnel need the ability to run Java elevated in order to run the applications they - depend on. - -Self-Elevation mode can be used for these types of special circumstances. By creating targeted -policies, you can ensure that designated users receive elevation rights for what they need, when -they need them. Let's look at how self-elevation works. - -Start by creating a new self-elevation policy as seen here. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/rules/apply/self_elevation_rules.webp) - -You can then select which types of executables you will allow for self-elevation. Here, we have -chosen EXE and MSI applications. - -![A screenshot of a computer screen - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/rules/apply/self_elevation_rules_1.webp) - -You must specify at least one group or user for the policy, even if the policy is targeted at the -organizational unit (OU) level. Unless you choose someone to direct the policy to, the policy will -not apply to anyone. In this example, the EastSalesUsers has been chosen. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/rules/apply/self_elevation_rules_2.webp) - -In order for a user to self-elevate an application, they have to right-click the application and -choose the self-elevation command from the context menu. You can choose to create a custom name for -this command if you wish or you can choose to use the default. You may also customize a message to -remind users that all self-elevated actions are audited, as is seen here. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/rules/apply/self_elevation_rules_3.webp) - -The final screen requires you to name the policy. You can also require justification text and/or -re-authentication to Windows (which works with Windows Hello, etc.) - -Users must then input an explanation as to why they want to run the given application and/or -re-authenticate before the application is launched. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/rules/apply/self_elevation_rules_4.webp) - -So in this scenario, let us say that EastSalesUser1 operating as a standard user wants to run -Procmon, which requires local admin rights. While they cannot run the application normally, they can -right-click on the application and select **Run Self Elevated with Endpoint Policy Manager**. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/rules/apply/self_elevation_rules_5.webp) - -Here you can see the Endpoint Policy Manager Self Elevation prompt that the user will see. The -customized message created earlier appears here. Because justification text was required, the user -must type a reason for why they wish to access this application. Once the user clicks **OK** the -application will open. - -![A screenshot of a computer error - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/rules/apply/self_elevation_rules_6.webp) - -If Force Reauthentication is selected, the behavior is like what is seen here. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/rules/apply/self_elevation_rules_7.webp) - -Self-elevated application requests are audited in Windows Event Viewer. There are two Event IDs -associated with Endpoint Policy Manager Self Elevation. Note that the username and application are -included in the log information. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/rules/apply/self_elevation_rules_8.webp) diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/automatic.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/automatic.md deleted file mode 100644 index eff9836b57..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/automatic.md +++ /dev/null @@ -1,122 +0,0 @@ ---- -title: "Automatic Rules Generator Tool" -description: "Automatic Rules Generator Tool" -sidebar_position: 100 ---- - -# Automatic Rules Generator Tool - -Once you remove Admin rights, the user will not be able to run some applications. Additionally, once -Endpoint Policy Manager SecureRun™ is enabled, the user will not be able to install and run items -they download. However, we have a utility in the PolicyPak Extras folder called PolicyPak LPM Auto -Rule Generator Tool, which will help you create rules to elevate applications and bypass SecureRun™ -as necessary. This tool operates on one machine at a time, and it is typically used on one or a few -representative machines. - -:::note -See the -[Auto Rules Generator Tool (with SecureRun)](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/autorulesgeneratortool.md) -video for a demo of Endpoint Policy Manager Automatic Rules Generator Tool in action. -::: - - -Following are the basic steps for operating the tool: - -- Point the tool toward one machine (in the future this tool might work for multiple machines). -- Define locations to search. -- Determine whether to turn on the SecureRun™ Simulator. -- Create rules to allow, block, or elevate, as needed. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/tool/rulesgenerator/endpointpolicymanager_automatic_rules.webp) - -On the opening page, pick a location or locations to run the tool. The tool offers standard or -custom locations (**Other Locations**) such as the User’s Desktop, and other unusual locations, as -shown here. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/tool/rulesgenerator/endpointpolicymanager_automatic_rules_1.webp) - -Next, select which types of items to search for. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/tool/rulesgenerator/endpointpolicymanager_automatic_rules_2.webp) - -Next, you have the option to turn on the SecureRun™ Simulator. The SecureRun™ Simulator will -simulate what would happen if SecureRun™ was turned on, so you can know which applications would be -automatically blocked or allowed based on the members of the SecureRun™ list. You can also add a -member like Microsoft Endpoint Manager (SCCM and Intune) or other installer accounts, as you would -with SecureRun™. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/tool/rulesgenerator/endpointpolicymanager_automatic_rules_3.webp) - -Then, you’ll be presented with all the applications and their default state and will have the -opportunity to create rules that will automatically change the state. For instance, when SecureRun™ -is enabled, many applications are set to Automatic Block. " - -You can select the drop-down in the Action column next to any program and change the state. - -- To allow NotepadP.exe to run even though SecureRun™ is on, simply change its state to "Allow" - (which was previously Automatic Block). -- To allow Procmon.exe to run elevated, even though SecureRun™ would block it and Procmon would - require admin rights, change the state to Elevate. -- You can also specify Block, but if you select this you will be double blocking, because not only - will SecureRun™ be blocking the program (automatically), but you will have also added a Block - (Deny) rule. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/tool/rulesgenerator/endpointpolicymanager_automatic_rules_4.webp) - -To save a little time, you can also hide items that are automatically allowed or blocked by -SecureRun™, as seen here, to reduce the number of items shown. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/tool/rulesgenerator/endpointpolicymanager_automatic_rules_5.webp) - -Next, you are presented with a summary of the rules you will be creating. - -![A screenshot of a computer program - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/tool/rulesgenerator/endpointpolicymanager_automatic_rules_6.webp) - -Now you can create the conditions automatically. The most secure settings are automatically checked, -but you may change them to other settings if desired. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/tool/rulesgenerator/endpointpolicymanager_automatic_rules_7.webp) - -The final page, shown in here, enables you to export the rules directly into a GPO (provided you -have Group Policy Create/Edit rights) or into an XML file that you can import into a Group Policy -Object. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/tool/rulesgenerator/endpointpolicymanager_automatic_rules_8.webp) - -Rules are now exported. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/tool/rulesgenerator/endpointpolicymanager_automatic_rules_9.webp) - -The result after looking at the GPO is shown here, with your rules ready to go. - -![policypak_automatic_rules_10](/images/endpointpolicymanager/leastprivilege/tool/rulesgenerator/endpointpolicymanager_automatic_rules_10.webp) diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/events/_category_.json b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/events/_category_.json deleted file mode 100644 index a9372537eb..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/events/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Discovery, Auditing, and Events", - "position": 110, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/events/audit.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/events/audit.md deleted file mode 100644 index 4b3f4fdc8c..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/events/audit.md +++ /dev/null @@ -1,60 +0,0 @@ ---- -title: "Creating Policy from Audit Event" -description: "Creating Policy from Audit Event" -sidebar_position: 40 ---- - -# Creating Policy from Audit Event - -Once you have generated events and store them locally or forward them to a service, you can -automatically create rules from events. - -If you are using Endpoint Policy Manager Cloud you can store events from endpoints and then -automatically transition those events to rules. See the -[Endpoint Policy Manager Cloud + PPLPM + Events: Collect Events in the Cloud](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/cloudevents.md) -video for additional information. - -If you have stored Windows events, you can use the details from those events to make rules using the -MMC snap-in. - -:::note -See the -[Auto-Create Policy from Global Audit event](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/globalauditevent.md)video -for a demonstration of this. -::: - - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/events/createpolicy/creating_policy_from_audit.webp) - -Then you can follow the wizard and paste in Event log details for supported Endpoint Policy Manager -Event IDs. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/events/createpolicy/creating_policy_from_audit_1.webp) - -In this example, a 6301 (SecureRun) event can be made into a rule with Copy / Paste like this. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/events/createpolicy/creating_policy_from_audit_2.webp) - -After pasting it in, the Wizard recommends some Actions, Conditions and Settings. You’re welcome to -change these as you need to for your situation. - -![A screenshot of a computer screen - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/events/createpolicy/creating_policy_from_audit_3.webp) - -The result is a policy which performs the action (Elevate or Allow and Log). - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/events/createpolicy/creating_policy_from_audit_4.webp) diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/events/auditingsettings/_category_.json b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/events/auditingsettings/_category_.json deleted file mode 100644 index 23ac9e839e..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/events/auditingsettings/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Auditing Settings", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/events/auditingsettings/overview.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/events/auditingsettings/overview.md deleted file mode 100644 index 6e9eb4b96d..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/events/auditingsettings/overview.md +++ /dev/null @@ -1,64 +0,0 @@ ---- -title: "Auditing Settings" -description: "Auditing Settings" -sidebar_position: 20 ---- - -# Auditing Settings - -Using Endpoint Policy Manager (formerly PolicyPak) Least Privilege Manager to remove admin rights or -turn on SecureRun™ is going to make your machines more secure. However, that also means that some -users might not be able to perform some actions with these two security measures in place. To -mitigate this, you may need to do some research to find out just what privileges your users require. -Endpoint Policy Manager Global Settings Policy lets you set up auditing to find out what -applications require extra privileges from standard users. There are four choices: - -- Audit applications requiring elevation - Help you learn, in advance of a transition, which items - require rules and what items will need rules to overcome UAC prompts. -- Audit elevated applications - Help you learn, after a transition, which items still need rules to - overcome UAC prompts. -- Audit untrusted applications - Help you learn, in advance or after a transition, which items that - would be automatically blocked by SecureRun™ are, in fact, blocked by SecureRun™ and will need - rules to overcome. -- Audit unsigned applications - Help you learn, in advance or after a transition, which items that - would be automatically blocked by SecureRun™ if trapping for unsigned applications. - -To begin the discovery process you will add a New Global Settings Policy, which can be done on -either user or computer side. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/events/auditingsettings/auditing_settings.webp) - -When you create a Global Settings Policy, you can choose to turn on the settings shown here. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/events/auditingsettings/auditing_settings_1.webp) - -Enabling these settings will write special events to the event logs. - -- Audit applications requiring elevation - Makes an audit log entry when a process is not elevated, - but Endpoint Policy Manager (formerly PolicyPak) Least Privilege Manager sees that it requires - elevation. We can detect Applications that specify "require elevation" in the manifest and if the - application is a Legacy Installer (that is, a 32-bit app without a manifest and with a - keyword—e.g. Install, Setup, etc.—in the file info). It should be noted that Endpoint Policy - Manager (formerly PolicyPak) Least Privilege Manager does not support detection of dynamically - elevated processes. -- Audit elevated applications - Makes audit log entries for processes that runelevated (i.e., - successful runs after applications are elevated). This creates an event, regardless of the reason - why the application runs elevated. Examples scenarios for this case could include apps that always - require elevation, apps that require elevation only when run by an admin (e.g. regedit), or - situations in which a user selected to run a file as an administrator. It should be noted that the - only time this setting will not write an event to the event log (as an AUDIT event) is when there - is a Endpoint Policy Manager (formerly PolicyPak) Least Privilege Manager rule in place to perform - the elevation, in which case it would get its own event ID type. -- Audit untrusted applications - Discovers rules needed when SecureRun™ is turned on. If an - application is attempted, but the item’s file owner is not in the SecureRun™ list, then the - application will be blocked when SecureRun is turned on. -- Audit unsigned applications - Discovers rules needed when SecureRun™ is turned on and the “Block - all unsigned” option would block unsigned applications. - -We'll discuss each of these auditing events in the next sections. diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/events/client.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/events/client.md deleted file mode 100644 index 838450cff3..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/events/client.md +++ /dev/null @@ -1,16 +0,0 @@ ---- -title: "Client Events" -description: "Client Events" -sidebar_position: 10 ---- - -# Client Events - -There is only one event ID for Endpoint Policy Manager Least Privilege Manager Client events. That -is Event 100, which describes when a User or Computer picks up new Endpoint Policy Manager Least -Privilege Manager policies. An example of this kind of event can be seen here. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/events/client_events.webp) diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/events/cloud.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/events/cloud.md deleted file mode 100644 index c0d0e7e42e..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/events/cloud.md +++ /dev/null @@ -1,47 +0,0 @@ ---- -title: "Creating Policy from Endpoint Policy Manager Cloud Events" -description: "Creating Policy from Endpoint Policy Manager Cloud Events" -sidebar_position: 50 ---- - -# Creating Policy from Endpoint Policy Manager Cloud Events - -In order to receive Endpoint Policy Manager reports for events via Endpoint Policy Manager Cloud -Event Collector, you will need to complete the following steps: - -- Submit a support ticket to activate the Cloud Event Log Collector -- Trialers/Customers will only have a one-day event collection offered at no cost -- 7 Day, 14 Day, or 30 Day storage intervals for retained events - -**Step 1 –** Select the Company Group you want to push events to Endpoint Policy Manager Cloud and -select **Edit Group**. - -![creating_policy_from_policypak](/images/endpointpolicymanager/leastprivilege/events/createpolicy/creating_policy_from_endpointpolicymanager.webp) - -**Step 2 –** Select the **Event Collector**,Refresh interval for computers time setting. - -![creating_policy_from_policypak_1](/images/endpointpolicymanager/leastprivilege/events/createpolicy/creating_policy_from_endpointpolicymanager_1.webp) - -**Step 3 –** Select the Event IDs you want to collect. - -![creating_policy_from_policypak_2](/images/endpointpolicymanager/leastprivilege/events/createpolicy/creating_policy_from_endpointpolicymanager_2.webp) - -:::note -You can select the drop-down option to select the Event IDs. See the -[List of Endpoint Policy Manager Event Categories and IDs](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/eventcategories.md) topic -for a list of Endpoint Policy Manager Event IDs. -::: - - -**Step 4 –** Go to the Reports section to see the events that have been generated. - -![creating_policy_from_policypak_3](/images/endpointpolicymanager/leastprivilege/events/createpolicy/creating_policy_from_endpointpolicymanager_3.webp) - -**Step 5 –** Use the Generate Rule(s) wizard to create policies from forwarded events. - -![creating_policy_from_policypak_4](/images/endpointpolicymanager/leastprivilege/events/createpolicy/creating_policy_from_endpointpolicymanager_4.webp) - -**Step 6 –** Final Result: a Rule is created and you can edit the policy name and/or change the -conditions if needed. - -![creating_policy_from_policypak_5](/images/endpointpolicymanager/leastprivilege/events/createpolicy/creating_policy_from_endpointpolicymanager_5.webp) diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/events/overview.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/events/overview.md deleted file mode 100644 index 5ef0bdbf94..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/events/overview.md +++ /dev/null @@ -1,61 +0,0 @@ ---- -title: "Discovery, Auditing, and Events" -description: "Discovery, Auditing, and Events" -sidebar_position: 110 ---- - -# Discovery, Auditing, and Events - -Endpoint Policy ManagerLeast Privilege Manager uses Windows event logs to generate interesting -events that you can audit. You can use these events to audit what has occurred. - -:::note -See the [Events](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/events.md) video for a demo of the Endpoint -Policy Manager Least Privilege Manager Events in action. -::: - - -You can also use these events, before you fully roll out Endpoint Policy Manager Least Privilege -Manager, to discover what rules you would need to make when you transition from local admin rights -to SecureRun™. - -:::note -See the -[Use Discovery to know what rules to make as you transition from Local Admin rights](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/discovery.md) -video for a demo of Endpoint Policy Manager Least Privilege Manager Discovery in action. -::: - - -Events are logged on each endpoint machine and only when the interesting event occurs. You can find -Endpoint Policy Manager Least Privilege Manager events inside Event Viewer in the Application and -Services folder and under the Endpoint Policy Manager node. Once you get an understanding of -Endpoint Policy Manager Least Privilege Manager and events, you might want to set up event -forwarding to capture and forward events from multiple machines. In this way you can see what -multiple users are doing and look through the events for interesting ideas to convert into rules. - -- See the - [How to forward interesting events for Least Privilege Manager (or anything else) to a centralized location using Windows Event Forwarding.](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/eventing/windowseventforwarding.md) - topic to learn more about event forwarding. -- You can also use Netwrix Auditor to capture events from endpoints to bring them to a centralized - source for investigation. See the - [How to use Netwrix Auditor to Report on Endpoint Policy Manager events](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/eventing/reports.md) - topic for additional information. -- You can use Azure Log Analytics to store Endpoint Policy Manager Least Privilege Manager events. - See the - [Windows 10 (and Server) Event Logs to Azure Log Analytics Walkthru](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/eventlogs.md) - topic for additional information. -- You can use Endpoint Policy Manager Cloud to store Endpoint Policy ManagerLeast Privilege Manager - events and make rules from stored events. See the - [Endpoint Policy Manager Cloud + PPLPM + Events: Collect Events in the Cloud](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/cloudevents.md)video - for additional information. - -Endpoint Policy Manager Least Privilege Manager has two event sources, which can be seen in Event -Viewer. - -- Endpoint Policy Manager Least Privilege Manager Client -- Endpoint Policy Manager Least Privilege Manager Client—Operational - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/events/discovery_auditing_and_events.webp) diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overview.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overview.md deleted file mode 100644 index 4d0c020657..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overview.md +++ /dev/null @@ -1,127 +0,0 @@ ---- -title: "Least Privilege Manager (Windows)" -description: "Least Privilege Manager (Windows)" -sidebar_position: 10 ---- - -# Least Privilege Manager (Windows) - -About Netwrix Endpoint Policy Manager (formerly PolicyPak) Least Privilege Manager - -Before reading this section, please ensure you have read the -[Installation Quick Start](/docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/overviewinstall.md) topics, which will help -you learn to do the following: - -- Install the Admin MSI on your GPMC machine -- Install the CSE on a test Windows machine -- Set up a computer in Trial or Licensed mode -- Set up a common OU structure - -Optionally, this manual demonstrates how to use on-prem Active Directory and Group Policy to deploy -Endpoint Policy Manager Least Privilege Manager directives. If you don't want to use Group Policy, -read the [MDM & UEM Tools](/docs/endpointpolicymanager/manuals/introductionandquick/mdm/overview.md) topics for additional information on how to deploy -your directives. - -Endpoint Policy Manager Least Privilege Manager enables you to do the following: - -- Get out of the risky business of giving users local admin rights. -- Shut the door on malware, crypto-malware, and zero-day exploits. -- Let non-admins safely install software they need, on-demand. -- Elevate specific scripts to run as needed (without insecurely embedding the script password inside - the script file). -- Elevate specific Java JAR files to run in this way, as needed. - -For instance, you don’t want to block your Standard Users from running applications that throw a UAC -prompt. A Standard User doesn’t have the right permissions, and that’s where Endpoint Policy Manager -Least Privilege Manager can come in. - -:::note -For more information on this issue, watch the -[Kill Local Admin Rights (Run applications with Least Privilege)](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/localadminrights.md) -video. -::: - - -The basic way to use Endpoint Policy Manager Least Privilege Manager is as follows: - -- Remove local admin rights from all users. -- Create a rule to specify which applications, Control Panel applets, or other areas a user would - need admin rights to. -- Create a Endpoint Policy Manager SecureRun™ rule to prevent all unknown applications from running - (optional, but recommended). -- Use On-Prem Group Policy to accept the Endpoint Policy Manager Least Privilege Manager policies - created. (This is what this guide will demonstrate.) -- Alternatively, export the Endpoint Policy Manager Least Privilege Manager rules and deliver them - in one of these ways: - - - Microsoft SCCM (See theDeploy Endpoint Policy Manager Settings Using SCCM or Other Management - System! video overview for additional information.) - - Microsoft Intune (See the - [Using Least Privilege Manager with your MDM service](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/methods/mdm.md) video - overview for additional information.) - - Your own systems management software (PDQ Deploy or similar) (See the - [Deploying Apps that Require Admin Rights Using Endpoint Policy Manager and PDQ Deploy](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/methods/pdqdeploy.md) - video overview for additional information.) - - Endpoint Policy Manager Cloud service (See the - [Use Endpoint Policy Manager Cloud to deploy PP Least Privilege Manager rules](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/methods/cloudrules.md) - video overview for additional information.) - -Then allow the client machine with the Endpoint Policy Manager client-side extension (CSE) to -receive the directives and perform the work. - -:::note -If you use an MDM service or Endpoint Policy Manager cloud service, you can deliver -Endpoint Policy Manager Least Privilege Manager settings even to non-domain-joined machines over the -Internet. -::: - - -## Endpoint Privilege Manager Moving Parts - -First thing is to understand the moving parts. - -- A management station. The Endpoint Policy Manager Admin Console MSI must be installed on the - management station where you create GPOs. Once it’s installed, you’ll see the Endpoint Policy - Manager | Endpoint Policy Manager Least Privilege Manager node, as shown below. -- The Endpoint Policy Manager CSE. This runs on the client (target) machine and is the same CSE for - all Endpoint Policy Manager components (such as Endpoint Policy Manager Least Privilege Manager, - Endpoint Policy Manager Device Manager, Endpoint Policy Manager Application Settings Manager, - etc.). -- Windows Endpoints. In order to use these, they must be licensed for Endpoint Policy Manager Least - Privilege Manager using one of the licensing methods. -- Mac Endpoints (optional). Mac endpoints must use Endpoint Policy Manager Cloud to get Endpoint - Policy Manager Least Privilege Manager directives. See more in the Endpoint Policy Manager Cloud - for MacOS Client manual. - -Also available is Endpoint Policy Manager Cloud when you purchase Endpoint Policy Manager Enterprise -or Endpoint Policy Manager SaaS. - -Endpoint Policy Manager Cloud enables you to create Endpoint Policy ManagerLeast Privilege Manager -directives using the in-cloud editors and connect endpoints (Windows and Mac) to get Endpoint Policy -Manager Least Privilege Manager directives. - -![overview1](/images/endpointpolicymanager/leastprivilege/overview1.webp) - -While this manual mostly demonstrates concepts using the Group Policy editor, nearly everything can -be done using the in-Endpoint Policy Manager-Cloud editors. Additionally, you can take on-prem MMC -directives and upload them to Endpoint Policy Manager Cloud, and take in-cloud directives and -download them back as MMC directives. - -Additionally, you may use Endpoint Policy Manager Least Privilege Manager with any management system -you like such as SCCM, Intune, PDQ deploy or anything else. This is because Endpoint Policy Manager -Least Privilege Manager directives may be exported as XML and wrapped up using the Endpoint Policy -Manager Exporter tool. This is a free utility that lets you take Endpoint Policy Manager Admin -Templates Manager and our other products’ XML files and wrap them into a portable MSI file for -deployment using Microsoft Endpoint Manager (SCCM and Intune), or your own systems management -software. - -The [MDM & UEM Tools](/docs/endpointpolicymanager/manuals/introductionandquick/mdm/overview.md) topics explain how to use the Endpoint Policy Manager -Exporter to wrap up any Endpoint Policy Manager directives and deliver them using Microsoft Endpoint -Manager (SCCM and Intune), KACE, your own MDM service, or Endpoint Policy Manager Cloud. - -In other words, you are free to use any delivery methodof your choice with Endpoint Policy Manager -Least Privilege Manager. - -This manual is designed to give you the basic concepts and operational scenarios you may encounter, -but once you get those down, you are free to use whatever delivery method is best for your -organization. diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overview_1.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overview_1.md deleted file mode 100644 index 75b095f65b..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overview_1.md +++ /dev/null @@ -1,124 +0,0 @@ ---- -title: "Troubleshooting" -description: "Troubleshooting" -sidebar_position: 120 ---- - -# Troubleshooting - -Endpoint Policy Manager Least Privilege Manager problems can generally be divided into three -categories: - -- Case 1: You expected a rule to bypass UAC, but it did not. -- Case 2: A rule is bypassing UAC, and it was not expected. -- Case 3: A rule is preventing an item from running when not expected. - -In all cases, you can see detailed information about the occurrence within the Endpoint Policy -Manager Least Privilege Manager log files which are found in: -`%appdata%\local\PolicyPak\PolicyPak Least Privilege Manager and %Programdata%\PolicyPak\PolicyPak Least Privilege Manager` - -First, you need to open the correct log file, based on the activity that has occurred, to see which -Endpoint Policy Manager Least Privilege Manager policies you have. There are several files to check: - -- ppUser_OnLogon.log. This log gets new data when Group Policy applies at logon, and items are set - for the User side, not the Computer side. -- ppUser_Switched.log. This log file is updated when Group Policy applies at logon, but items are - set for the Computer side. -- ppUser_OnGroupPolicy.log. This log gets new data when Group Policy applies in the background when - GPupdate is run, or when Group Policy applies in the background. -- ppUser_onPolicyChanged.log. This log file is updated when Group Policy applies in the background, - or when a non-Group Policy method is used (e.g., Microsoft Endpoint Manager (SCCM and Intune) or - Endpoint Policy Manager Cloud). - -Start troubleshooting by verifying that the following conditions (seen here) are true: - -- You have the GPO (or file). -- There is a collection within the GPO. -- The rules are within the collection. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/troubleshooting/leastprivilege/troubleshooting_1.webp) - -The final log to check is the ppUser_Operational.log, which can indicate why something is denied -(blocked), allowed, or elevated. It shows what was trying to run and which GPO, collection, and -policy performed the action, along with the ultimate result. For example, this log shows a Deny -result. - -![A screenshot of a computer code - -Description automatically -generated](/images/endpointpolicymanager/troubleshooting/leastprivilege/troubleshooting_2.webp) - -An Allowed result can be seen here. - -![A screenshot of a computer code - -Description automatically -generated](/images/endpointpolicymanager/troubleshooting/leastprivilege/troubleshooting_3.webp) - -An Elevated result can be seen here. - -![A screenshot of a computer code - -Description automatically -generated](/images/endpointpolicymanager/troubleshooting/leastprivilege/troubleshooting_4.webp) - -Additionally, as expressed earlier, you can also see when Admin Approval dialogs are shown to end -users, when they are canceled, and which processes failed to run because they did not get -Administrator privileges. In this screenshot you can see that the dialog was canceled, which means -the end user was not permitted to perform an action which required a UAC prompt. - -![A screenshot of a computer program - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/adminapproval/avoid_pop_ups_with_admin_approval_1.webp) - -Additionally, Admin Approval is logged in the ppUser_Operational.log file as well, which shows when -applications require Admin privileges and when the user successfully enters in a response code from -an Admin when he or she uses the Endpoint Policy Manager Admin Approval Tool. - -:::note -The Reason Code is also stored here and is a fixed list from within the Endpoint Policy -Manager Admin Approval Tool. -::: - - -``` -Admin Approval Dialog (2018/07/14, 15:55:20.312, PID: 1360, TID: 3020) -{ -    Process requires administrator privileges -    Dialog Guide: {3F8058CB-AB08-F878-D146-78312F2B7031} User Sid: S-1-5-    21-934088035-149717768-3671783038-1116 -    User Name: FABRIKAM\EastSalesUser1 Process Id: 7072 -    Process Path: C:\Users\eastsalesuser1\Desktop\Silverlight install.exe -    Command Line: "C:\Users\eastsalesuser1\Desktop\Silverlight install.exe" -    Task Kind: ApplicationInstaller  -    Task Hash: -25AA5CA53202838E3937FCFF39B3DB34C6B5A7188D28F45D7BFEDE81CF37ED6D -    Executable: C:\Users\eastsalesuser1\Desktop\Silverlight install.exe -    File Owner Sid: S-1-5-21-934088035-149717768-3671783038-1116 -    File Owner Name: FABRIKAM\EastSalesUser1 Trusted: No -    Signed: Yes -} // End of Admin Approval Dialog, elapsed time: 00:00:00.001 -Admin Approval Dialog (2018/07/14, 15:56:10.279, PID: 1360, TID: 2920) -{ -    Dialog success -    Dialog Guid: S-1-5-21-934088035-149717768-3671783038-1116 User Sid: S-1-5-21-934088035-149717768-3671783038-1116 -    User Name: FABRIKAM\EastSalesUser1 Process Id: 7072 -    Process Path: C:\Users\eastsalesuser1\Desktop\Silverlight install.exe -    Command Line: "C:\Users\eastsalesuser1\Desktop\Silverlight install.exe" -    Task Kind: ApplicationInstaller  -    Task Hash: -25AA5CA53202838E3937FCFF39B3DB34C6B5A7188D28F45D7BFEDE81CF37ED6D -    Executable: C:\Users\eastsalesuser1\Desktop\Silverlight install.exe -    File Owner Sid: S-1-5-21-934088035-149717768-3671783038-1116 -    File Owner Name: FABRIKAM\EastSalesUser1 Trusted: No -    Signed: Yes -    Reason: Application_LOB  -    Forced Elevation: No - -``` - -If requested by support, logs are automatically wrapped up and can be sent to Netwrix Support with -the PPLOGS.EXE command on any endpoint where the client-side extension is installed. diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/_category_.json b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/_category_.json deleted file mode 100644 index 982a7ef8f0..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Best Practices and Miscellaneous Topics", - "position": 80, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overviewmisc" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/acltraverse.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/acltraverse.md deleted file mode 100644 index f6f47a3562..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/acltraverse.md +++ /dev/null @@ -1,63 +0,0 @@ ---- -title: "Understanding ACL Manage File System and Registry (ACL Traverse)" -description: "Understanding ACL Manage File System and Registry (ACL Traverse)" -sidebar_position: 50 ---- - -# Understanding ACL Manage File System and Registry (ACL Traverse) - -Endpoint Policy Manager Least Privilege Manager enables Standard Users to perform operations in the -file system or registry where they would not normally have access. To do this, you’ll assign a -process which, when run, will determine which operations can be performed on a file or portion of -the registry. - -Start out by creating a rule. In this case we want to specify an application process, like Notepad, -to perform an operation like Write the HOSTS file. - -First specify the process match and signify you want to perform **ACL manage file system and -registry**. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/understanding_acl_manage_file.webp) - -Next, specify the path(s) to files or registry and change the Permission (using the dropdown or -**Edit permissions** button.) - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/understanding_acl_manage_file_1.webp) - -As a result, when Notepadis run from the specified location it can edit the -`c:\windows\system32\drivers\etc\hosts` file. - -:::note -See the -[Endpoint Policy Manager and ACL Traverse: How to give rights to modify HOSTS files and similar](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/acltraverse/modifyhosts.md) -video for a demo on how to use ACL Traverse to modify the hosts file. -::: - - -:::note -See the -[Endpoint Policy Manager: ACL Traverse to enable users to delete icons on desktop](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/acltraverse/deleteicons.md) -video for a demo on how to use ACL Traverse to delete icons on the desktop. -::: - - -:::note -See the -[Endpoint Policy Manager ACL and File Traverse: Let any application in Programfiles overcome NTFS permissions](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/acltraverse/ntfspermissions.md) -video for a demo on how to use ACL Traverse to let any application in Programfiles overcome NTFS -permissions. -::: - - -:::note -See the -[Endpoint Policy Manager: Overcome ACLs in Registry even as Standard User](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/acltraverse/registry.md) -video for a demo of ACL Traverse and Registry. - -::: diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/bestpractices/_category_.json b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/bestpractices/_category_.json deleted file mode 100644 index d167ed218a..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/bestpractices/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Best Practices", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/bestpractices/commandline.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/bestpractices/commandline.md deleted file mode 100644 index 3e73ecaf8b..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/bestpractices/commandline.md +++ /dev/null @@ -1,88 +0,0 @@ ---- -title: "Creating and Using Command Line Rules" -description: "Creating and Using Command Line Rules" -sidebar_position: 40 ---- - -# Creating and Using Command Line Rules - -From time to time, you may encounter a situation in which an application only runs from the command -line, or there is an application that you want to run with specific command-line arguments. This -could occur in day-to-day use or with items that must run from a logon script and perform the task -with elevated rights. - -:::note -See the -[Prevent Users Running some commands with command lines](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/preventusercommands.md) -video for an overview of using Endpoint Policy Manager (formerly PolicyPak) Least Privilege Manager -and command-line arguments. -::: - - -A good example would be enabling standard users to start and stop services with a command line, or -to run the Performance Monitor’s Resource Monitor. Both must be executed from the command line. - -A Combo rule addresses this issue, by using Path and Command-line argument rules. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/bestpractices/rules/creating_and_using_command.webp) - -The first step, as shown here, is to specify the Path Condition, such as -`%SYSTEMROOT%\System32\sc.exe`. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/bestpractices/rules/creating_and_using_command_1.webp) - -For the command-line arguments in this example, the argument **stop wsearch**, which stops the -Windows Search Service, is specified. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/bestpractices/rules/creating_and_using_command_2.webp) - -For **Check Mode**, there are four choices: - -- Strict empty - Command must have no arguments. -- Strict equality - This means the Command and Rule will be elevated (or otherwise run) when the - arguments are exactly as you specify in the same order, with no variance. -- Ignore arguments order - This means the Command and Rule will be elevated (or otherwise run) when - all the arguments are in place, regardless of the order. -- Any argument from the list - This means that any argument in the Arguments box (separated by - spaces) is allowed in the command. - -:::note -Ignore arguments order and **Any argument from the list** only work when the command has -slash-based switches. If the command line doesn’t have slashes, then use the **Strict equality** -method. -::: - - -On the next screen, for **Action**, select **Run with elevated privileges**. - -The net result is that **standard users** can now stop the `wsearch` service without needing -elevated rights. - -![A computer screen with a black and white text - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/bestpractices/rules/creating_and_using_command_3.webp) - -Another example would be to enable Standard Users to perform their own Registry merge. To do this, -make a Combo rule, which starts with the Path Condition running `%SYSTEMROOT%\System32\reg.exe` (not -shown). - -For the Command-line Arguments, select **Strict equality**, and then specify the location of the -.REG file, perhaps on a secure file server, as demonstrated here. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/bestpractices/rules/creating_and_using_command_4.webp) - -Since the arguments are being specified, a user cannot add their own .REG files; they can only add -those specified by the admin (e.g., on a server where they could only read and not modify it). diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/bestpractices/fileinfo.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/bestpractices/fileinfo.md deleted file mode 100644 index 4b2c6f12b2..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/bestpractices/fileinfo.md +++ /dev/null @@ -1,96 +0,0 @@ ---- -title: "Deeper Dive on File Info" -description: "Deeper Dive on File Info" -sidebar_position: 20 ---- - -# Deeper Dive on File Info - -The **File Info Condition** enables you to match inner criteria of your EXE or MSI. In this example, -we have selected the **Process Monitor**, and the **File Info** and **Product Info** have been -populated. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/bestpractices/deeper_dive_on_file_info.webp) - -The MMC-based File Info editor can read file attributes and perform work depending on the internal -values of the program. - -- **File Info Name** and **File Info Version** in the Endpoint Policy Manager (formerly PolicyPak) - Least Privilege Manager GUI correspond to **File description** and **File version** in the file’s - internal values, as highlighted in red in these examples. -- **Product Info Name** and **Product Info Version** in the Endpoint Policy Manager (formerly - PolicyPak) Least Privilege Manager GUI correspond to **Product Name** and **Product Version** in - the file’s internal values, as highlighted in blue in these examples. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/bestpractices/deeper_dive_on_file_info_1.webp) - -This screen shot shows an older iTunes Setup as an additional example. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/bestpractices/deeper_dive_on_file_info_2.webp) - -MSI files have different characteristics than EXE files, so Endpoint Policy Manager Least Privilege -Manager has a different GUI when you are using the **File Match** condition. Here you can see the -MSI and File Match GUI after Skype Installer MSI has been selected. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/bestpractices/deeper_dive_on_file_info_3.webp) - -Getting the product code from the file system isn’t possible, which is why you need the Endpoint -Policy Manager File Information Viewer. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/bestpractices/deeper_dive_on_file_info_4.webp) - -To get to the information you need, use the Endpoint Policy Manager File Information Viewer (found -in the Extras folder in the Download) and select the application to see some of the MSI internals, -as shown here. - -Product Info match for MSI files will match on all the fields highlighted in red: - -- Product Version -- Manufacturer -- Product Code -- Upgrade Code - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/bestpractices/deeper_dive_on_file_info_5.webp) - -One way to use File Info match could be to make a rule that says, "Allow install of Skype Setup -.MSI, provided it is version 7 or later." In order to do that, you would make an MSI Combo rule with -three conditions, as shown here. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/bestpractices/deeper_dive_on_file_info_6.webp) - -The three conditions could be: - -- Path Condition - the name of the File (SkypeSetup.Msi) -- Signature Condition - the digital signature of Skype Technologies S.A. -- Product Info - a version higher than 7.0 - -You can see the **Product Info Condition** here. You can also see that you can add additional GUIDs -for matching MSI product codes. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/bestpractices/deeper_dive_on_file_info_7.webp) - -This makes the **Product Info Condition** a powerful tool, when used alone or with a Combo rule. diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/bestpractices/overview.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/bestpractices/overview.md deleted file mode 100644 index 2d4c7eef3d..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/bestpractices/overview.md +++ /dev/null @@ -1,24 +0,0 @@ ---- -title: "Best Practices" -description: "Best Practices" -sidebar_position: 10 ---- - -# Best Practices - -:::note -See the -[Best Practices for Elevating User-Based Installs](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/elevatinguserbasedinstalls.md) -video for an overview of Endpoint Policy Manager Least Privilege Manager best practices. -::: - - -Endpoint Policy Manager (formerly PolicyPak) Least Privilege Manager’s job is to overcome UAC -prompts which normally stop users from being productive. However, you always want to make sure you -are putting Endpoint Policy Manager (formerly PolicyPak) Least Privilege Manager to work in the -ideal way, and not over-permission an application, which could be a security concern. - -When possible use the Best Practice Signature Condition alongside and File Info condition as a Combo -rule. This is because both of these items have digital signatures. - -With that in mind, let’s go over some “What not to dos” before we continue on with Best Practices. diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/export.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/export.md deleted file mode 100644 index 9b11bc2170..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/export.md +++ /dev/null @@ -1,33 +0,0 @@ ---- -title: "Exporting Policies and Collections" -description: "Exporting Policies and Collections" -sidebar_position: 100 ---- - -# Exporting Policies and Collections - -The [MDM & UEM Tools](/docs/endpointpolicymanager/manuals/introductionandquick/mdm/overview.md) topics explain how to use the Endpoint Policy Manager -Exporter to wrap up any Endpoint Policy Manager directives and deliver them using Microsoft Endpoint -Manager (SCCM and Intune), KACE, your own MDM service, or Endpoint Policy Manager Cloud. To export a -policy for later use using Endpoint Policy Manager Exporter or Endpoint Policy Manager Cloud, -right-click the collection or the policy and select **Export to XML**. This will enable you to save -an XML file, which you can use later. - -:::note -For more information on how to use Endpoint Policy Manager Least Privilege Manager and -Endpoint Policy Manager Cloud, please see the -[Use Endpoint Policy Manager Cloud to deploy PP Least Privilege Manager rules](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/methods/cloudrules.md) -and the [Using Least Privilege Manager with your MDM service](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/methods/mdm.md) -videos, -::: - - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/exporting_policies_and_collections.webp) - -:::note -Exported collections or policies maintain any Item-Level Targeting set within them. - -::: diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/itemleveltargeting.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/itemleveltargeting.md deleted file mode 100644 index 02ccc5cc0a..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/itemleveltargeting.md +++ /dev/null @@ -1,98 +0,0 @@ ---- -title: "Item-Level Targeting with Collections and Policies" -description: "Item-Level Targeting with Collections and Policies" -sidebar_position: 70 ---- - -# Item-Level Targeting with Collections and Policies - -:::note -For more information on Endpoint Policy Manager Least Privilege Manager and Item Level -Targeting, please see the -[Endpoint Privilege Manager: Use Item Level Targeting to hone in when rules apply.](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/itemleveltargeting.md) -video. -::: - - -Item-Level Targeting is used in Microsoft Group Policy Preferences and other areas of Endpoint -Policy Manager to target or filter where specific items will apply. With Endpoint Policy -ManagerLeast Privilege Manager, Item-Level Targeting can be placed on collections as well as -Endpoint Policy Manager Least Privilege Manager policies within collections. - -A collection enables you to group together Endpoint Policy Manager Least Privilege Manager policies -so they can act together. For instance, you might create a collection for only East Sales Users and -another for West Sales Users. . - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/item_level_targeting_with.webp) - -Below you can see two created collections that can hold other collections or policies. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/item_level_targeting_with_1.webp) - -Right-click any Endpoint Policy Manager Least Privilege Manager Collection or Policy and select -**Change Item-Level Targeting**, to set filtering conditions on when the policy will apply. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/item_level_targeting_with_2.webp) - -The **Change Item Level Targeting** menu item brings up the Targeting Editor. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/item_level_targeting_with_3.webp) - -You can select any combination of characteristics you want to test for. Administrators familiar with -Group Policy Preferences’ Item-Level Targeting will be at home in this interface as it is -functionally equivalent. - -You can apply one or more targeting items to a policy, which enables targeting items to be joined -logically. You can also add targeting collections, which group together targeting items in much the -same way parentheses are used in an equation. In this way, you can create a complex determination -about where a policy will be applied. Collections may be set to **And**, **Or**, **Is**, or **Is -Not**. - -:::note -Additionally, Endpoint Policy Manager Least Privilege Manager allows you to target users -or user groups, even if the policy is on the computer side. See the -[Link to Computer, Filter by User](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/userfilter.md) video for details on this -superpower. -::: - - -Below are some real-world examples of how you can use Item-Level Targeting. - -- Software prerequisites. If you want to configure an application’s settings, first make sure the - application is installed on the user’s computer before configuring it. You can use File Match or - Registry Match targeting items (or both) to verify a specific version of a file, or a registry - entry is present. For an example of this, look in the Uninstall registry key. -- Mobile computers. If you want to deploy settings exclusively for users on mobile PCs, filter the - rule to apply only to mobile PCs by using the Portable Computer targeting item. -- Operating system version. You can specify different settings for applications based on the - operating system version. To do this, create one rule for each operating system and then filter - each rule using the Operating System targeting item. -- Group membership. You can link the Group Policy Object (GPO) to the whole domain or organizational - unit (OU), but only members within a specific group will pick up and process the rule settings. -- IP range. You can specify different settings for various IP ranges, like different settings for - the home office and each field office. - -After editing is completed, close the editor. The policy's icon, or the collection’s icon, has now -changed to orange, which shows that it has Item-Level Targeting, as well as the Column labeled Item -Level Targeting, as seen below. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/item_level_targeting_with_4.webp) - -When Item-Level Targeting is on, the policy won’t apply unless the conditions are true. If -Item-Level Targeting is applied to a collection, then none of the items in the collection will apply -unless the Item-Level Targeting on the collection evaluates to true. diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/scopefilters/_category_.json b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/scopefilters/_category_.json deleted file mode 100644 index 34681e67bc..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/scopefilters/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Understanding Process Scoping & Filters", - "position": 30, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/scopefilters/overview.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/scopefilters/overview.md deleted file mode 100644 index 40207017a8..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/scopefilters/overview.md +++ /dev/null @@ -1,39 +0,0 @@ ---- -title: "Understanding Process Scoping & Filters" -description: "Understanding Process Scoping & Filters" -sidebar_position: 30 ---- - -# Understanding Process Scoping & Filters - -The **Scope** filter section can be found in various rule types in Endpoint Policy Manager Least -Privilege Manager. For instance, it exists in every explicit rule, like this: - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/scopefilters/understanding_process_scoping.webp) - -And also in SecureRun™ rules: - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/scopefilters/understanding_process_scoping_1.webp) - -:::note -The Policy Scope option for Processes is only available when used on the Computer side; on -the User side it is greyed out because this setting is only meant to express to the COMPUTER -(system) how to work with User and User and System Processes. On the User side, the processes are -always in the context of the User. However, the Scope filter for Users & Groups is available on the -User side. -::: - - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/scopefilters/understanding_process_scoping_2.webp) - -In this topic, we will explore various use cases when you might use the Policy Scope option (which -again, will only be un-gray / valid on the Computer side.) diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/securecopy.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/securecopy.md deleted file mode 100644 index e82c695256..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/securecopy.md +++ /dev/null @@ -1,61 +0,0 @@ ---- -title: "Understanding SecureCopy" -description: "Understanding SecureCopy" -sidebar_position: 40 ---- - -# Understanding SecureCopy - -:::note -See the -[SecureCopy(TM). Empower users to copy then elevate items](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/securecopy.md) -for a video overview demonstration. -::: - - -Endpoint Policy Manager Least Privilege Manager SecureCopy feature lets you create your own store -for users to take applications and installers which need elevation, and empower users to copy them -to a location of your (or their) choice, and perform the installation or running of the application. - -**Step 1 –** Start out by creating a SecureCopy™ policy. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/understanding_securecopy.webp) - -**Step 2 –** Specify a read only share for users. Pay careful attention to the warning here. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/understanding_securecopy_1.webp) - -**Step 3 –** Specify the target folder location. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/understanding_securecopy_2.webp) - -**Step 4 –** Specify the options. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/understanding_securecopy_3.webp) - -**Step 5 –** Finish the policy. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/understanding_securecopy_4.webp) - -The result is that users can now use the Copy with Endpoint Policy Manager SecureCopy™ feature to -copy items from your store to their locations and then perform automatic elevation on those items. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/understanding_securecopy_5.webp) diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/wildcards.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/wildcards.md deleted file mode 100644 index 1e52e879c4..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/wildcards.md +++ /dev/null @@ -1,44 +0,0 @@ ---- -title: "Using Wildcards with Endpoint Privilege Manager and Certificates" -description: "Using Wildcards with Endpoint Privilege Manager and Certificates" -sidebar_position: 60 ---- - -# Using Wildcards with Endpoint Privilege Manager and Certificates - -:::note -See the -[Endpoint Privilege Manager and Wildcards](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/wildcards.md) video -on how to use Endpoint Policy Manager Least Privilege Manager and Certificate Wildcards. -::: - - -Applications like Zoom, GotoMeeting, Webex and others often have certificates which change from time -to time. So even if you’ve set up the best practice of Certificate + File Info rules (like we -discussed in the [Best Practices](/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/bestpractices/overview.md) section), those automatic rules can go -out of date quickly. - -To allow Endpoint Policy Manager Least Privilege Manager to permit Wildcards in Certificate -matching, select Advanced Mode and then **Allow wildcards in Common Name**. This will flip the -certificate to be permitted to Wildcard mode. - -Now you can address the fields you need as Wildcards; in this example, we’ve specified L=\*. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/using_wildcards_with_endpointpolicymanager.webp) - -Endpoint Policy Manager Least Privilege Manager will continue to check all the intermediary -certificates along the way before it gets to the one you modified. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/using_wildcards_with_endpointpolicymanager_1.webp) - -:::warning -You want to try to be as restrictive as possible when using Wildcards; the more you -open up, the less secure you will be. - -::: diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/preconfiguredxmls.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/preconfiguredxmls.md deleted file mode 100644 index 8088be87e0..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/preconfiguredxmls.md +++ /dev/null @@ -1,53 +0,0 @@ ---- -title: "Preconfigured XMLs" -description: "Preconfigured XMLs" -sidebar_position: 50 ---- - -# Preconfigured XMLs - -Endpoint Policy Manager Least Privilege Manager comes with some preconfigured XML files that help to -get you started quickly with a variety of common situations and applications. - -- See the - [Installing applications-and-Preconfigured-Rules](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/installapplications.md) - video for an overview of how to use preconfigured Endpoint Policy ManagerLeast Privilege Manager - XML examples. -- A common request is to overcome the Print dialog. As such we have a preconfigured rule to help - with that. See the - [Endpoint Privilege Manager: Install Printers via Native NTPRINT Dialog](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/helperstoolsandtips/ntprintdialog.md) - video for an example. -- Another common request is to overcome the Windows Ethernet & IP address GUI. As such we have a - preconfigured rule to help with that. See the - [Endpoint Privilege Manager: Edit IP SETTINGS EDIT VIA WIN GUI](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/helperstoolsandtips/wingui.md) - video for an example. - -First, to download the preconfigured XMLs, log onto the PolicyPak Portal, and click **Guidance XMLs -and Scripts (PPLPM, PPBR, PPFAM, & PPSCRIPTS)**. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/preconfigured_xmls.webp) - -Once these files are downloaded and unpacked, you’ll see a folder named \_PolicyPak Least Privilege -Manager XMLs. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/preconfigured_xmls_1.webp) - -If you want to enable users to install CutePDF Reader, you can use the preconfigured XML found in -the above folder and drag and drop it to the MMC editor. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/preconfigured_xmls_2.webp) - -After that, the application will install on the endpoints without requiring Admin rights for -installation. - -These examples may or may not work, depending on specific circumstances so be sure to test before -rolling out. diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/preferences.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/preferences.md deleted file mode 100644 index 4dc6186185..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/preferences.md +++ /dev/null @@ -1,53 +0,0 @@ ---- -title: "Using Group Policy Preferences to Manage Local Admin Groups" -description: "Using Group Policy Preferences to Manage Local Admin Groups" -sidebar_position: 130 ---- - -# Using Group Policy Preferences to Manage Local Admin Groups - -:::note -See the -[Use Group Policy to remove local admin rights (then Endpoint Policy Manager to enable Least Privilege)](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/removelocaladmin.md) -video for an overview of using Group Policy preference with Endpoint Policy Manager Least Privilege -Manager. -::: - - -Endpoint Policy ManagerLeast Privilege Manager is built on the principle of stripping local admin -rights for standard users and then giving them the exact privileges they need to do their jobs. To -fully utilize this strategy, you may need to start with a clean slate concerning the membership of -your Windows local admin groups. Before we do that, you should first confirm who the members of your -Domain Admins group are and make sure that no one is listed there who shouldn't be there. If so, -remove those accounts immediately. - -:::note -Doing this will create the need to do some cleanup in the local admins group on each -computer. -::: - - -Now let's move on to local admin groups. You can easily do this by creating a GPO, going to -**Computer Configuration** > **Preferences** > **Control Panel Settings** > **Local Users and -Groups** and select **Local Group** . - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/using_group_policy_preferences.webp) - -Next, you’ll use the **Update** action which has been selected by default along with the check box -to **Delete all member users**.  You may also want to select **Delete all member groups** as well.  -The first check box setting will delete any existing user members, including those remnant accounts -that were left after cleaning up the domain admins group in the prior step. This cleans out -everyone, which means you have to add back the accounts you want. Remember that you don't want to -allocate local admin groups to standard users, so only the domain admins group and the local admin -user account should be members. This is achieved by clicking the **Add** button and selecting them. - -![A screenshot of a group - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/using_group_policy_preferences_1.webp) - -Once the policy is deployed, you will have removed all non-privileged users from the local admins -group of all targeted desktops. diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/privilegesecure/_category_.json b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/privilegesecure/_category_.json deleted file mode 100644 index 689014a435..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/privilegesecure/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Endpoint Policy Manager & Netwrix Privilege Secure", - "position": 90, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/privilegesecure/client.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/privilegesecure/client.md deleted file mode 100644 index 86ed5ee110..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/privilegesecure/client.md +++ /dev/null @@ -1,56 +0,0 @@ ---- -title: "Getting Started: Client" -description: "Getting Started: Client" -sidebar_position: 20 ---- - -# Getting Started: Client - -If you already have the Netwrix Endpoint Policy Manager (formerly PolicyPak) CSE installed on your -desired endpoint, great! That’s it, you’re done. However, in the Netwrix Privilege Secure download, -you will also find the Netwrix Endpoint Policy Manager (formerly PolicyPak) CSE available within the -Netwrix Privilege Secure download as a courtesy. - -Therefore, you may use either the Netwrix Endpoint Policy Manager (formerly PolicyPak) CSE found -either within the Netwrix Privilege Secure download, or the Netwrix Endpoint Policy Manager -(formerly PolicyPak) CSE found in the Netwrix Endpoint Policy Manager (formerly PolicyPak) download. - -:::note -See the -[Netwrix Privilege Secure Client - Getting Started with MMC with/without Endpoint Policy Manager ](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/netwrixprivilegesecure/privilegesecure.md)video -for a demo on the relationship of the Netwrix Privilege Secure and Netwrix Endpoint Policy Manager -(formerly PolicyPak) downloads and their moving parts. -::: - - -:::warning -It might be best to use the Netwrix Endpoint Policy Manager (formerly PolicyPak) CSE -download since the Netwrix Endpoint Policy Manager (formerly PolicyPak) CSE download may have -bugfixes, etc., which may not yet be available in the Netwrix Privilege Secure download due to lag -time. -::: - - -:::note -The interaction between Netwrix Privilege Secure and Netwrix Endpoint Policy Manager -(formerly PolicyPak) CSE does notneed to be licensed. When you evaluate or purchase Netwrix -Privilege Secure, the major Netwrix Endpoint Policy Manager (formerly PolicyPak) Least Privilege -Manager management and elevation functions are automatically available to you without needing to -install any specific endpoint license. -::: - - -- The Netwrix Endpoint Policy Manager (formerly PolicyPak) Least Privilege Manager directives which - are distributed as part ofNetwrix Privilege Secure server performing the brokering\*will work even - if unlicensed. -- The Netwrix Endpoint Policy Manager (formerly PolicyPak) specific items where there is no Netwrix - Privilege Secure server involved require a license. - -You can see the difference in the list view as seen here. - -![getting_started_client](/images/endpointpolicymanager/integration/privilegesecure/gettingstarted/getting_started_client.webp) - -In the next section we will see how to create Netwrix Endpoint Policy Manager (formerly PolicyPak) + -Netwrix Privilege Secure policies which will not need an endpoint license to work out of the box. -Again, the idea is that you are already paying for an Netwrix Privilege Secure license, and because -Netwrix Privilege Secure is involved in the policy, those policies work on the endpoint for free. diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/privilegesecure/overview.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/privilegesecure/overview.md deleted file mode 100644 index cf9129793a..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/privilegesecure/overview.md +++ /dev/null @@ -1,42 +0,0 @@ ---- -title: "Endpoint Policy Manager & Netwrix Privilege Secure" -description: "Endpoint Policy Manager & Netwrix Privilege Secure" -sidebar_position: 90 ---- - -# Endpoint Policy Manager & Netwrix Privilege Secure - -The Endpoint Policy Manager CSE is the agent for Netwrix Privilege Secure. When paired together, you -get the following benefits: - -- You are able to launch applications (elevated or not) from a local desktop, and have them brokered - by the Netwrix Privilege Secure server -- Applications will launch with Netwrix Privilege Secure 2fa (built-in or 3rd party) -- Applications may launch elevated if desired -- The whole screen can be recorded and sent up to the Netwrix Privilege Secure server for - safekeeping and analysis - -Therefore, instead of relying on RDP to remote control into a server to perform a privileged -operation, maintaining a second set of credentials, and having nothing recorded for posterity, you -can use the Better Together power of Netwrix Privilege Secure and Endpoint Policy Manager CSE. - -The best part is, if you are only interested in the Endpoint Policy Manager + Netwrix Privilege -Secure Better Together story, you only have to pay for the Netwrix Privilege Secure licenses. That -is, there is no required endpoint license when Netwrix Privilege Secure is used alongside a Endpoint -Policy Manager directive (where Netwrix Privilege Secure is involved.) You will see more as we go -along but, if you are using Netwrix Privilege Secure and want to try out the power of Endpoint -Policy Manager, that is included in your Netwrix Privilege Secure license. - -:::note -See the -[Netwrix Privilege Secure Client - Getting Started with MMC with/without Endpoint Policy Manager ](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/netwrixprivilegesecure/privilegesecure.md)video -for a demo on the relationship of the Netwrix Privilege Secure and Endpoint Policy Manager downloads -and moving parts. -::: - - -:::note -All Netwrix Privilege Secure + Endpoint Policy Manager documentation from Netwrix -Privilege Secure can be found in [Netwrix Privilege Secure for Endpoints Documentation](https://helpcenter.netwrix.com/category/privilegesecure_endpoints). - -::: diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/privilegesecure/policymatch/_category_.json b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/privilegesecure/policymatch/_category_.json deleted file mode 100644 index e742ab586d..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/privilegesecure/policymatch/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Credential Based Policy Match", - "position": 40, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "policymatch" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/privilegesecure/resourcebased/_category_.json b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/privilegesecure/resourcebased/_category_.json deleted file mode 100644 index 427f9cdc29..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/privilegesecure/resourcebased/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Resource Based Policy Match", - "position": 50, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "policymatch_1" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/_category_.json b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/_category_.json deleted file mode 100644 index c8c981264e..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Rules", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/activexitems.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/activexitems.md deleted file mode 100644 index 1d58a9be14..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/activexitems.md +++ /dev/null @@ -1,34 +0,0 @@ ---- -title: "Elevating ActiveX Items" -description: "Elevating ActiveX Items" -sidebar_position: 70 ---- - -# Elevating ActiveX Items - -:::note -For an overview of Elevating ActiveX Items see the -[Overcome UAC prompts for Active X controls](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/uacpromptsactivex.md) video. -::: - - -ActiveX items are still important to many organizations who rely upon them. Even though Internet -Explorer isn’t available anymore, ActiveX controls still work in IE Mode for Windows 10 and 11 with -Edge. - -Trying to install ActiveX controls as a Standard User is not allowed. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_activex_items.webp) - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_activex_items_1.webp) - -You can use ActiveX rules and specify the CAB file you want to permit. - -Then, clicking on **Validate & Add** will attempt to determine if the CAB is signed and add that -requirement to the rule. diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/com_cslidclass.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/com_cslidclass.md deleted file mode 100644 index f3197c5d85..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/com_cslidclass.md +++ /dev/null @@ -1,55 +0,0 @@ ---- -title: "Elevating COM / CSLID Class Items" -description: "Elevating COM / CSLID Class Items" -sidebar_position: 60 ---- - -# Elevating COM / CSLID Class Items - -:::note -For an overview of COM Class Policies, see the -[COM Support](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/comsupport.md) video. -::: - - -COM items are a special type of Windows process and Endpoint Policy Manager can typically elevate -them if needed. Start out by understanding the CSLID value you need to overcome. For instance the -properties of Settings > Ethernet > Properties shows a UAC prompt for a COM / CSLID ID. - -Carefully take note of the CSLID ID before proceeding. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_com_cslid_class.webp) - -Then create the policy to overcome the UAC prompt by using New > COM Class Policy. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_com_cslid_class_1.webp) - -You can then use three methods to provide the CSLID number: - -- Add custom COM Class - Typical for installed applications which have a COM function. -- Add well-known COM Class - Typical for operating system functions -- Scan registry for COM Classes - Helpful if you need to locate registered COM items from an example - machine. - -Those choices can be seen here. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_com_cslid_class_2.webp) - -In this example we will **Add well-known COM class**. Be sure to select the exact match or the -function will not work as expected. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_com_cslid_class_3.webp) - -After the policy applies, the COM item will have its UAC prompt overcome. diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/controlpanelapplets.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/controlpanelapplets.md deleted file mode 100644 index 7e31e7f4a4..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/controlpanelapplets.md +++ /dev/null @@ -1,47 +0,0 @@ ---- -title: "Elevating Control Panel Applets" -description: "Elevating Control Panel Applets" -sidebar_position: 30 ---- - -# Elevating Control Panel Applets - -Endpoint Policy Manager can also be used to elevate situations within Windows itself. Select -**Add** > **New Control Panel Applet Policy** from the drop-down menu. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_control_panel_applets.webp) - -Next, consider a situation in which a Standard User may need access to the Device Manager and the -Disk Defragmenter Control Panel applets. Make two policies (going through the wizard twice). The -first time choose **Device Manager** first, as shown here. Next, select **Run with elevated -privileges** as the action. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_control_panel_applets_1.webp) - -The second time you run through the wizard, choose **Optimize Drives**,. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_control_panel_applets_2.webp) - -The result of having gone through the wizard twice is the two MMC entries shown here. - -![A screenshot of a calendar - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_control_panel_applets_3.webp) - -At this point, GPupdate can be run and tested on the endpoint. You should bypass the UAC prompt and -be prompted for Device Manager and the Disk Defragmenter, as shown here. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_control_panel_applets_4.webp) diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/deny/_category_.json b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/deny/_category_.json deleted file mode 100644 index 69d1912533..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/deny/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Denying Applications (Standard, UWP, and DLLs)", - "position": 80, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/deny/dlls.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/deny/dlls.md deleted file mode 100644 index bf4f7fe85a..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/deny/dlls.md +++ /dev/null @@ -1,33 +0,0 @@ ---- -title: "Denying DLLs within Applications" -description: "Denying DLLs within Applications" -sidebar_position: 30 ---- - -# Denying DLLs within Applications - -You can deny DLLs within Applications, like PowerShell’s internal DLLs, which make it operate. - -First you must turn on the option with a Global DLL policy, which may only be enabled on the -**Computer Configuration** side. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/deny/denying_dlls_within_applications.webp) - -Then create a matching rule with **New DLL Policy**. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/deny/denying_dlls_within_applications_1.webp) - -Then you can **Deny execution** of the DLL when it is encountered. - -:::note -Some additional details and examples can be found in the -[How to Defend against malicious PowerShell attacks (DLLs)?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipsforadminapproval/maliciousattacks.md) -topic. - -::: diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/deny/standard.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/deny/standard.md deleted file mode 100644 index 1ea8f719e5..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/deny/standard.md +++ /dev/null @@ -1,53 +0,0 @@ ---- -title: "Denying Standard Applications" -description: "Denying Standard Applications" -sidebar_position: 10 ---- - -# Denying Standard Applications - -:::note -For an overview of Endpoint Policy Manager performing Application control see the -[Endpoint Policy Manager Application Control with PP Least Privilege Manager](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/applicationcontrol.md) -video. -::: - - -To do this, first create a rule type which matches your scenario. Then pick the condition to match. -For instance, you could use a **Signature Condition** to select a file from Mozilla Corporation, as -seen here. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/deny/denying_standard_applications.webp) - -Then select the **Action** type **Deny execution**. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/deny/denying_standard_applications_1.webp) - -The MMC will take action to deny the desired user rights. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/deny/denying_standard_applications_2.webp) - -The result is that Firefox and every other application signed by this publisher would not run on the -endpoint no matter how it made it there (even if it was properly installed). The result of a -**Deny** rule can be seen below. - -:::note -You may use Endpoint Policy Manager (formerly PolicyPak) Least Privilege Managerr to -deliver custom messages to users, including links to click on URLs for more information on your -corporate policies. -::: - - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/deny/denying_standard_applications_3.webp) diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/deny/windowsuniversal.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/deny/windowsuniversal.md deleted file mode 100644 index 37ef6724dc..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/deny/windowsuniversal.md +++ /dev/null @@ -1,85 +0,0 @@ ---- -title: "Denying UWP Applications" -description: "Denying UWP Applications" -sidebar_position: 20 ---- - -# Denying UWP Applications - -:::note -For an overview of how to manage UWP applications, see the -[Manage, block and allow Windows Universal (UWP) applications](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/windowsuniversalapplications.md) -video. -::: - - -Endpoint Policy Manager can be used to manage Universal Windows Platform (UWP) applications, -allowing you to block one or more applications. To do this, select **Add** > **New UWP Policy**. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/deny/denying_uwp_applications.webp) - -There are several options for managing UWP apps: - -- You can create a policy for all UWP apps. -- You can create a policy for just Microsoft Store UWP apps. -- You can create a policy for sideloaded or Enterprise apps. - -Here we have chosen the option for **All UWP apps**. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/deny/denying_uwp_applications_1.webp) - -Next, you can deny execution for all of the apps at one time, or allow and log them, as shown here. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/deny/denying_uwp_applications_2.webp) - -If you choose to deny the apps, you must select your desired deny action. In this example, the -default Windows block message will pop up when a user attempts to open any UWP application. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/deny/denying_uwp_applications_3.webp) - -Using the other options for managing apps, you can block all Microsoft Store apps, or all Enterprise -UWP apps at one time in a similar fashion. You can also allow or block specific UWP apps as well. -You might want to create one policy that blocks all UWP apps and then supplement it with other rules -that allow specific UWP apps. You also might want to create rules that only block designated apps. -To choose to block only designated apps, select the **Specific UWP apps** option. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/deny/denying_uwp_applications_4.webp) - -Next, you will need to provide some information about the app, such as the Package Name and -Publisher. You can retrieve this information by either pointing to it using the **Select an -installed app** button, or by running the Get-AppxPackage command in an elevated PowerShell session. -This command will list all of the installed UWP apps on a given machine. Then you can populate the -required information to manage the Microsoft Xbox app has been entered. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/deny/denying_uwp_applications_5.webp) - -Next, finish creating the policy by selecting the block/allow action and further targeting the -policy. - -In general, most people will want to use this option to block all UWP applications while letting -some applications continue to work. This can be done with two stacked rules. In this example, all -UWP applications are denied, but then applications with "Calc" or "Store" in the name, or "Adobe" as -the publisher are allowed to run as shown below. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/deny/denying_uwp_applications_6.webp) diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/executables.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/executables.md deleted file mode 100644 index ddd49f7099..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/executables.md +++ /dev/null @@ -1,155 +0,0 @@ ---- -title: "Elevating Executables" -description: "Elevating Executables" -sidebar_position: 10 ---- - -# Elevating Executables - -:::note -For an overview of how to elevate applications that need admin rights, see the -[Kill Local Admin Rights (Run applications with Least Privilege)](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/localadminrights.md) -video. -::: - - -In the previous section, we observed that when a Standard User tries to run Process Monitor, they -are not allowed because it requires admin rights. Creating a Endpoint Policy Manager Least Privilege -Manager policy and getting it delivered will remedy this. - -In these examples we’ll be using Group Policy to create the policies and then delivering them. -However, you may also use Endpoint Policy Manager Cloud, and MDM service like Intune, or your own -system like SCCM. - -For these examples, you must link it to where users are and create a new executable policy. As shown -in this example, create a GPO named PPLPM Policies and link it to the East Sales Users -organizational unit (OU). Then in the **User Configuration** > Netwrix Privilege Secure > **Least -Privilege Manager** section, select **Add** > **New Executable Policy**. - -![A computer screen shot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_executables.webp) - -An executable rule can be one of two types: - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_executables_1.webp) - -Simple rules match on a specific piece of criteria, which could include the name or location (Path), -the fingerprint of the file (Hash), the company that digitally signed the file (Signature), or -specific characteristics of a file such as version and inner name (File Info). - -Combo rules enable matching on any or all the mentioned criteria. A popular combination is file name -and publisher. You can make specific rules about the items you want to enable with elevated rights -by using two conditions. - -You’ll then be asked if you want this policy to be related to an action within Netwrix Privilege -Secure. For now, we’ll skip this (leave unchecked) and we’ll return back to it in the -[Endpoint Policy Manager & Netwrix Privilege Secure](/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/privilegesecure/overview.md) -topic. Future examples will purposely omit this step until we need it. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_executables_2.webp) - -In this case, use a Hash condition, which indicates, "Run ProcMon.exe with elevated rights because -of the Hash (fingerprint) of the file." Select **Hash** and click **Next**. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_executables_3.webp) - -Additionally, this is where you set the settings for **Apply to child processes**. For now, leave -as-is. You can learn more about this in ” in the section on“Best Practices and Miscellaneous -Topics.” - -Specify a file (in this example, we'll use the copy of Process Monitor) or a running process (which -is not applicable in this scenario), as shown here.  The hash is populated and you may choose which -Algorithm to use. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_executables_4.webp) - -The next screen, as shown here, demonstrates possible action types and options for Endpoint Policy -Manager Least Privilege Manager. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_executables_5.webp) - -These action types are: - -- **Run with elevated privileges**. This adds the SYSTEM token to the process, elevating it as - needed when a Standard User runs it. -- **Run with customized token**. This is not usually needed but provides granular control of tokens - in processes. -- **ACL Manage file system and registry** You can enable specific files or registry items to be - managed when specific processes are run. -- **Deny execution**. This prevents something from running even if the user is an admin. -- **Allow and log**. This enables an application to run if otherwise prevented. When used in - conjunction with SecureRun™, this can be useful. The next section and example will explore this - in greater detail. - -These Options are: - -- **Apply on demand**. Enables the elevation only when application is right-clicked. For more - information on this, see[Apply on Demand Rules](/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/apply/ondemand.md). -- **Do not generate events**. PolicyPak logs items in the Windows event log. Setting this item - configured (checked) means that events will not be logged when this process is run. -- **Do not elevate Open/Save dialog**. By default Endpoint Policy Manager will prevent child - processes from gaining elevation thru the Open/Save dialogs. See the - [Best Practices and Miscellaneous Topics](/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/overviewmisc.md) topic for additional - information. -- **Show popup message**. Optional requirement to either force the user to reauthenticate and/or put - in Justification text before the process starts. See the - [Best Practices and Miscellaneous Topics](/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/overviewmisc.md) for additional - information. - -The next page provides the opportunity to enhance this policy with these final touches: - -- **Name** -- **Comment** -- **State** (default is enabled) -- **Scope**. See the [Best Practices and Miscellaneous Topics](/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/overviewmisc.md) for - additional information. -- **Item-Level Targeting**. See the - [Best Practices and Miscellaneous Topics](/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/overviewmisc.md) for additional - information. -- **Parent Process filter**. See the - [Best Practices and Miscellaneous Topics](/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/overviewmisc.md) for additional - information. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_executables_6.webp) - -Once you have made your selections, an entry in the Group Policy Management Editor is obtained, as -shown in here. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_executables_7.webp) - -To re-edit the policy, it is not necessary to use the wizard again. Instead, just double-click the -policy entry to view it in a flat list, as shown here. Then click on any of the numbered items to -make any changes. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_executables_8.webp) - -On your endpoint, log on as the user who will obtain the GPO (e.g., EastSalesUser1), or run -GPupdate. Once the GPO applies, Process Monitor will run without a UAC prompt, as demonstrated here. - -![elevating_executables_9](/images/endpointpolicymanager/leastprivilege/elevate/elevating_executables_9.webp) diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/msiinstallerfiles.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/msiinstallerfiles.md deleted file mode 100644 index a055edfa4d..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/msiinstallerfiles.md +++ /dev/null @@ -1,66 +0,0 @@ ---- -title: "Elevating MSI Installer Files" -description: "Elevating MSI Installer Files" -sidebar_position: 20 ---- - -# Elevating MSI Installer Files - -Endpoint Policy Manager can be used to elevate MSI applications to allow end users to install them -by themselves. If you followed along in the Quick Start, you previously downloaded Skype for -desktop, which is an MSI file. Attempting to run Skype Setup as a Standard User is blocked, as -previously demonstrated. - -You can enable a Standard User to install the MSI application by selecting **Add** > **New Windows -Installer Policy** from the drop-down menu, as shown here. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_msi_installer_files.webp) - -At this point, a prompt will appear for a Simple rule or a Combo rule. For the Quick Start, we -suggest choosing **Use Simple rule (recommended)** as we have shown previously. Then, on the -Conditions page, options to select **Path**, **Hash**, **Signature**, or **Product Info** are -available. For this Quick Start, we suggest you select **Hash**. - -:::note -We realize that hash values often change for installers, but using Hash is only for the -Quick Start. To learn how to authorize users to keep applications up to do date, learn about Combo -rules in [Best Practices and Miscellaneous Topics](/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/overviewmisc.md). -::: - - -On the next page, click **Select windows installer** and select the SkypeSetup.MSI package -(previously downloaded). - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_msi_installer_files_1.webp) - -You will then see the Hash information automatically entered. Click **Next**. On the Select Action -page, select **Run with elevated privileges** and click **Next**. On the Settings page, enter a name -for the policy and click **Finish**. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_msi_installer_files_2.webp) - -Now you will see an entry in the Endpoint Policy Manager (formerly PolicyPak) Least Privilege -Manager MMC. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_msi_installer_files_3.webp) - -Run GPupdate on the endpoint, and then, as a Standard User, try to run the Skype MSI installer -again. This time the UAC prompt is removed from the Install icon, and the MSI application should -install as expected. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/elevate/elevating_msi_installer_files.webp) diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/overview.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/overview.md deleted file mode 100644 index 03eed4b784..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/rules/overview.md +++ /dev/null @@ -1,142 +0,0 @@ ---- -title: "Rules" -description: "Rules" -sidebar_position: 10 ---- - -# Rules - -Endpoint Policy ManagerLeast Privilege Manager is located within the Netwrix Privilege Secure node. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/rules/rules_1.webp) - -:::note -You will only see all components of Endpoint Policy Manager if you download the Endpoint -Policy Manager Admin Console from Portal.endpointpolicymanager.com, but not if you are using only the Netwrix -Privilege Secure console. -::: - - -Endpoint Policy ManagerLeast Privilege Manager is within the Netwrix Privilege Secure node and not -within the Netwrix Endpoint Policy Manager (formerly PolicyPak) node to demonstrate the relationship -between Endpoint Policy Manager and Netwrix Privilege Secure. That is, you can use all of Endpoint -Policy Manager (all Endpoint Policy Manager components) or you may wish to use Endpoint Policy -Manager alongside Netwrix Privilege Secure. For more information, see the -[Endpoint Policy Manager & Netwrix Privilege Secure](/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/privilegesecure/overview.md) -topic. - -Endpoint Policy Manager MMC snap-in enables you to create new Endpoint Policy Manager Least -Privilege Manager policies or collections. - -Collections are groupings of policies, and policies are the rules that perform the work. You can -create collections, and policies within collections, on the User side, the Computer side, or both. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/rules/rules_2.webp) - -Endpoint Policy ManagerLeast Privilege Manager can elevate (or block) the following: - -- Executable policies -- Control Panel applets -- Windows installers (MSIs) -- Scripts (BAT, CMD, PS1, JS, JSE, VBS, VBE) -- Java JAR (archive) files -- UWP applications -- COM Class Policies -- ActiveX Policies - -To test some of these scenarios, we recommend that you download some applications on your Windows -endpoint to follow along. Perform these downloads as a Standard User, such as EastSalesUser1, but -notas a local admin. - -For example, as EastSalesUser1, download an application that, when run by a Standard User, requires -UAC prompts. To view a UAC prompt on the Microsoft side as an example, try to -[download](https://docs.microsoft.com/en-us/sysinternals/downloads/procmon) the Microsoft Process -Monitor application. - -Running the Process Monitor application as a Standard User, such as EastSalesUser1, is not -permitted. The application requires local admin rights, resulting in a prompt for UAC. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/rules/rules_3.webp) - -To participate in the Quick Start exercises, [download](http://go.skype.com/msi-download) Skype MSI -for Windows via their website. - -:::warning -You may get a warning when downloading in Edge, but it is perfectly safe. -::: - - -When a Standard User attempts to install Skype MSI installer, they are not allowed. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/rules/rules_4.webp) - -The final example is downloading a portable app. A portable app is an application that can be -downloaded anytime by a user. Sometimes it requires no installation; other times, it must be -unpacked before you can run it. Here are a few examples of these apps: - -- [VLC Media Player Portable](https://portableapps.com/apps/music_video/vlc_portable) -- [Sudoku Portable](https://portableapps.com/apps/games/sudoku_portable) -- [Notepad2 Portable](https://portableapps.com/apps/development/notepad2_portable)[https://portableapps.com/apps/games/sudoku_portable](https://portableapps.com/apps/games/sudoku_portable) - -In this example, Notepad2 has been downloaded and unpacked to the user’s desktop in a folder called -Notepad2. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/rules/rules_5.webp) - -The Standard User can now open the folder and immediately run the EXE file and use the app. Despite -the fact that this application could be a virus or crypto-malware, the user with standard rights can -still run it. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/rules/rules_6.webp) - -In the Quick Start examples with Endpoint Policy Manager Least Privilege Manager, the goals are as -follows: - -- Allow Standard Users to run Process Monitor elevated but maintain Standard User rights everywhere - else. -- Allow Standard Users to install Skype Setup MSI elevated but maintain Standard User rights - everywhere else. -- Prevent the system from running unknown software, such as Notepad2, if it was not installed by the - original admin until it is determined to be safe. -- Allow Notepad2 to run normally once its safety has been determined. -- Prevent users from downloading all other unknown applications. - -The examples we will look at are: - -- Applications on the endpoint that are properly installed by the admin (leftmost column of - applications in this example). -- Applications that require elevation to run (Procmon in this example). -- Applications that are downloaded by the user, which may be unknown or harmful (Notepad2 in this - example). - -![A computer screen shot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/rules/rules_7.webp) - -For these examples, keep copies of Process Monitor and NotePad2 Portable handy to serve as a -reference from your management station. These are not installed apps; you will be attempting to run -them before and during the Quick Start to see how they are affected by PolicyPak Least Privilege -Manager. - -When you download these applications, it is ideal to store them in two places. The first copy should -be sitting on your endpoint. The second copy should be sitting on your Group Policy management -station, as these will also be required to help create the rules for these examples. diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/securerun/_category_.json b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/securerun/_category_.json deleted file mode 100644 index ff3f9a0880..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/securerun/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Quick Start - Using SecureRun™ to Block Threats and Unknown Software", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/securerun/avoiduac.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/securerun/avoiduac.md deleted file mode 100644 index f7256b340b..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/securerun/avoiduac.md +++ /dev/null @@ -1,41 +0,0 @@ ---- -title: "Creating Rules to Avoid UAC Prompts and Other Dialogs" -description: "Creating Rules to Avoid UAC Prompts and Other Dialogs" -sidebar_position: 20 ---- - -# Creating Rules to Avoid UAC Prompts and Other Dialogs - -Over time, once SecureRun is on, you will likely still get some application attempting to update in -the background, which will cause a pop-up explaining a blocking attempt. - -Once you have learned which programs are causing the pop-ups, you can decide to create an Allow and -Log rule, an Elevate rule, or a Deny rule. The rule type you choose depends on the application and -what you’re trying to do. - -When SecureRun is turned on, the typical action needed is Allow and Log through a command line rule. -For instance, to allow Java to attempt to keep updating, you would set a Path Condition and set a -rule to Allow and Log a command line. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/securerun/creating_rules_to_avoid_uac.webp) - -The example below show a Combo rule enabling OneDriveSetup.exe to keep running (**Path Condition** -and **Command-line Condition**) with the Allow and Log action. - -For more information on Combo rules, see -[Creating and Using Executable Combo Rules](/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overviewmisc/bestpractices/executablecombo.md) - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/securerun/creating_rules_to_avoid_uac.webp) - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/securerun/creating_rules_to_avoid_uac_1.webp) - -After the rules are created, you should not see pop-ups from installers with rules in place. diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/securerun/inlinecommands.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/securerun/inlinecommands.md deleted file mode 100644 index 87fc59110e..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/securerun/inlinecommands.md +++ /dev/null @@ -1,30 +0,0 @@ ---- -title: "SecureRun and Inline Commands" -description: "SecureRun and Inline Commands" -sidebar_position: 10 ---- - -# SecureRun and Inline Commands - -By default PolicyPak SecureRun will also block “inline commands.” - -For example, one can run something like this from the Run dialog (or in many other ways.) - -``` -cmd /c "mkdir C:\TEST & copy c:\Windows\notepad.exe C:\TEST" -``` - -![A screenshot of a computer error - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/securerun/securerun_and_inline_commands.webp) - -Normally, users don’t do this. But it could be valid during an application installation or program -setup. You can see an example of this used in the Microsoft -[Latest Astaroth living-off-the-land attacks are even more invisible but not less observable](https://www.microsoft.com/en-us/security/blog/2020/03/23/latest-astaroth-living-off-the-land-attacks-are-even-more-invisible-but-not-less-observable/) -article. - -SecureRun will automatically try to block such attempts. For more information on how to deal wit -this issue, please see -[Why does Endpoint Policy Manager SecureRun block "inline commands" and what can I do to overcome or revert the behavior ?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/troubleshooting/inlinecommands.md) -for guidance and details. diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/securerun/overview.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/securerun/overview.md deleted file mode 100644 index 3d94ef4333..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/securerun/overview.md +++ /dev/null @@ -1,166 +0,0 @@ ---- -title: "Quick Start - Using SecureRun™ to Block Threats and Unknown Software" -description: "Quick Start - Using SecureRun™ to Block Threats and Unknown Software" -sidebar_position: 20 ---- - -# Quick Start - Using SecureRun™ to Block Threats and Unknown Software - -:::note -For an overview of how to block threats and unknown software like malware and similar -applicates, see the -[Using Least Privilege Manager's SecureRun Feature](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/feature.md) -video. -::: - - -In the previous section, we established that users with Standard rights and admin rights can end up -downloading both safe portable applications or unsafe malware applications. In addition, both Admins -and Standard Users can download MSI applications, even if they wish to install them later. To avoid -having unsafe applications being downloaded and used, Endpoint Policy Manager can ensure that -applications that were not properly installed by the admin, or in-house software deployment tool -will not run without the admin's approval. In this Quick Start example, all unknown applications and -MSI applications will be blocked, while one specific application will be allowed to run (with -standard, not elevated, rights). - -## Understanding SecureRun - -Endpoint Policy ManagerLeast Privilege Manager can block all items that are not properly installed -by the admin with the Endpoint Policy Manager SecureRun™ policy. To see how this works, let's first -create a new SecureRun™ policy in the GPO. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/securerun/quick_start_using_securerun.webp) - -This will result in a new SecureRun™ policy editor, as displayed here. To turn on SecureRun click -**Enable** and then, if desired, , change the messaging from Default to Customized (or Silently.) - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/securerun/quick_start_using_securerun_1.webp) - -In the SecureRun™ Members list, you can review who and what has been added, including the defaults -members: - -- Local computer administrator -- NT SERVICE\TrustedInstaller -- NT AUTHORITY\SYSTEM -- BUILTIN\Administrators - -The members on this list are the people and system processes that usually install software. For that -reason, no regular users or groups are listed here because they do not normally install software. - -:::note -Add system processes or accounts to the SecureRun Members list that properly install -software, such as Microsoft Endpoint Manager (SCCM and Intune), etc., to enable the software to -deliver applications without being prevented. -::: - - -When SecureRun™ is on, Endpoint Policy ManagerLeast Privilege Manager checks to see who owns the -file executable, MSI file, script, or Java JAR file. When users download files off the Internet or -copy them from a USB flash drive, they own the file, and since they aren't on the SecureRun™ -Members list, Endpoint Policy Manager Least Privilege Manager will block all applications that they -have installed. - -In the SecureRun™ policy editor, click **Ok**. You can then see that the SecureRun™ policy is -enabled and is checking for file ownership (aka “Trusted”), as shown here. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/securerun/quick_start_using_securerun_2.webp) - -At the endpoint, run GPupdate or log on as a user who will receive the policy. The result is that -all unknown applications are blocked (like previously downloaded Notepad2), and all properly -installed applications are allowed. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/securerun/quick_start_using_securerun_3.webp) - -Additionally, MSI files that attempt to launch are also subjected to Endpoint Policy Manager -SecureRun™. If an application already has an Allow rule in place (similar to what we saw earlier -when we enabled SkypeSetup.MSI to run via a Hash rule), then it will continue to launch. But MSI -installers that don't have an Allow rule in place will be prevented from running, as show here. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/securerun/quick_start_using_securerun_4.webp) - -This works because Endpoint Policy Manager Least Privilege Manager is enforcing the SecureRun™ -Members list. If we look at who owns the file for the properly installed application, we can see the -owner is SYSTEM. If we look at who owns the file for the unknown application downloaded from the -Internet, we can see the owner is EastSalesUser1. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/securerun/quick_start_using_securerun_5.webp) - -If you review the list of users allowed to run applications, you will notice that EastSalesUser1 is -not on the list and, therefore, is not permitted to run Untrusted applications. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/securerun/quick_start_using_securerun_6.webp) - -If you decide you want to enable an application, such as Notepad2, to run, create a new Executable -rule (Path, Hash, Signature, or File) as shown in the previous section. This time, select **Allow -and log**. This will run the application with Standard User rights. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/securerun/quick_start_using_securerun_7.webp) - -The result can be seen in the MMC list view. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/securerun/quick_start_using_securerun_8.webp) - -As a test, run GPupdate on the endpoint, and then run Notepad2, which will run with Standard User -rights and bypass SecureRun™ as seen here. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/securerun/quick_start_using_securerun_9.webp) - -To recap, Endpoint Policy ManagerLeast Privilege Manager SecureRun™ operates under the following -criteria: - -- The Endpoint Policy Manager Least Privilege Manager SecureRun™ policy checks every executable and - MSI that the user attempts to run. -- If the user isn’t on the SecureRun™ Members list, they are not permitted to run it. -- Only executable applications, scripts, Java JAR files, and MSI files that have file owners on the - SecureRun™ Members list are allowed to run. -- If an application (or other type) has an **Allow and Log** rule enabling its use, it is permitted. - -The result is that Endpoint Policy Manager SecureRun™ blocks any executable or MSI that the user -downloads and tries to run but continues to let properly installed applications run. - -:::note -An additional way to use Endpoint Policy Manager SecureRum™ is to also trap for anything -that is unsigned. See the -[Least Privilege Manager: Block All Unsigned with SecureRun](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/howtoandtechsupport/preventunsigned.md) -video for a demonstration. -::: - - -:::note -Remember, all Endpoint Policy Manager Least Privilege Manager rules, including SecureRun, -may be used with an MDM service, or your own management system like PDQ deploy For more information -on this topic, please see the -[Blocking Malware with Endpoint Policy Manager and PDQ Deploy](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/methods/pdqdeployblockmalware.md) -video demonstration. - -::: diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/uacprompts/_category_.json b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/uacprompts/_category_.json deleted file mode 100644 index 43b7880c7e..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/uacprompts/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Overcoming Common UAC Prompts with Helper Tools", - "position": 60, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "uacprompts" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/uacprompts/uacprompts.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/uacprompts/uacprompts.md deleted file mode 100644 index 2ebb5fd620..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/uacprompts/uacprompts.md +++ /dev/null @@ -1,56 +0,0 @@ ---- -title: "Overcoming Common UAC Prompts with Helper Tools" -description: "Overcoming Common UAC Prompts with Helper Tools" -sidebar_position: 60 ---- - -# Overcoming Common UAC Prompts with Helper Tools - -:::note -See the -[Overcome Network Card, Printer, and Remove Programs UAC prompts](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/helperstoolsandtips/uacprompts.md) -video for an overview of using Endpoint Policy Manager Least Privilege Manager Helper Tools in -action. -::: - - -Three common areas where users need to overcome admin prompts are: - -- Network adapters -- Printers -- Software removal - -Let’s examine how Endpoint Policy Manager Least Privilege Manager’s helper tools can help overcome -these three challenges. - -If Standard Users try to manage their own Network settings, they can take a few steps, but they’re -quickly going to encounter a UAC prompt, as seen here. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/tool/helper/overcoming_common_uac_prompts.webp) - -:::note -We used COM / CSLID rules earlier to overcome this concern, but this section and solution -gives you another option. -::: - - -Similarly, if a Standard User attempts to add a printer, they will receive another UAC prompt, shown -here. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/tool/helper/overcoming_common_uac_prompts.webp) - -Finally, if Standard Users try to manage their own Apps and Features by uninstalling an application -that they no longer need, they will also be prevented by a UAC prompt, seen here. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/leastprivilege/tool/helper/overcoming_common_uac_prompts_1.webp) - -After setting up Endpoint Policy Manager’s Helper Tools, you can overcome all three of these issues. diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/_category_.json b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/_category_.json deleted file mode 100644 index 08c53943f5..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Endpoint Policy Manager Cloud for MacOS Client", - "position": 30, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/applicationlaunch.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/applicationlaunch.md deleted file mode 100644 index abb8e0ab1a..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/applicationlaunch.md +++ /dev/null @@ -1,44 +0,0 @@ ---- -title: "Using MacOS + Admin Approval (aka Application Launch + Challenge)" -description: "Using MacOS + Admin Approval (aka Application Launch + Challenge)" -sidebar_position: 30 ---- - -# Using MacOS + Admin Approval (aka Application Launch + Challenge) - -:::note -See the -[Endpoint Policy Manager for Mac and Admin Approval](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/adminapproval.md) -video for an overview of this section. -::: - - -You might want users to only be able to run applications (normally or those which require admin -rights) only when approved. With the Admin Approval function you can do just that. - -Refer back to the Application Launch section earlier and make a matching rule. For instance, you -might want to make a matching rule for Firefox Browser.  You may need multiple rules if a product -has multiple executables. - -![A screen shot of a computer - -Description automatically -generated](/images/endpointpolicymanager/mac/using_macos_admin_approval.webp) - -![A computer screen with a screen showing a login page - -Description automatically -generated](/images/endpointpolicymanager/mac/using_macos_admin_approval_1.webp) - -:::note -The Endpoint Policy Manager Least Privilege Admin Approval tool for Windows must be used -to perform approval requests. -::: - - -The following options are honored in the Mac (and Windows) client: - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/mac/using_macos_admin_approval_2.webp) diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/installclient.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/installclient.md deleted file mode 100644 index 6c9876e1a3..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/installclient.md +++ /dev/null @@ -1,70 +0,0 @@ ---- -title: "How to Install the Endpoint Policy Manager MacOS Client" -description: "How to Install the Endpoint Policy Manager MacOS Client" -sidebar_position: 10 ---- - -# How to Install the Endpoint Policy Manager MacOS Client - -After logging into Endpoint Policy Manager Cloud, head to Company Details, locate Download PolicyPak -Cloud Client for MacOS Installer, and follow the directions. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/mac/how_to_install_the_endpointpolicymanager.webp) - -Then follow the directions on the Mac and the Endpoint Policy Manager Least Privilege Manager pieces -contained within the Endpoint Policy Manager Cloud Client. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/mac/how_to_install_the_endpointpolicymanager_1.webp) - -Then use the details provided earlier to install the certificate and register with the Endpoint -Policy Manager Cloud service. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/mac/how_to_install_the_endpointpolicymanager_2.webp) - -## Endpoint Policy Manager Commands after Installation - -Endpoint Policy Manager on Mac has a variety of commands you can perform.  Start with -`policypak –help` to see all the commands which might be different than what is presented here. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/mac/how_to_install_the_endpointpolicymanager_3.webp) - -A few important commands to try out would be: - -`Policypak cloud-sync` which shows the list of policies affecting this Mac. Tip: This command may be -run by any user (without Sudo / admin rights.) - -![A black screen with white text - -Description automatically -generated](/images/endpointpolicymanager/mac/how_to_install_the_endpointpolicymanager_4.webp) - -`Policypak license-list –verbose` to get the license list from Cloud service. - -![A computer screen with white text - -Description automatically -generated](/images/endpointpolicymanager/mac/how_to_install_the_endpointpolicymanager_5.webp) - -And `policypak policy-list` to get a total list of what is happening on the machine. - -![Inserting image...](/images/endpointpolicymanager/mac/how_to_install_the_endpointpolicymanager_6.webp) - -Mac policies are then created in the in-cloud editors against the All | MacOS groups or any Company -Groups’ macOS group like what’s seen here. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/mac/how_to_install_the_endpointpolicymanager_7.webp) diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/mac/_category_.json b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/mac/_category_.json deleted file mode 100644 index 405b8fe1d8..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/mac/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Troubleshooting + Logging the Mac OS Client", - "position": 40, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/overview.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/overview.md deleted file mode 100644 index 0afce4fc95..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/overview.md +++ /dev/null @@ -1,30 +0,0 @@ ---- -title: "Endpoint Policy Manager Cloud for MacOS Client" -description: "Endpoint Policy Manager Cloud for MacOS Client" -sidebar_position: 30 ---- - -# Endpoint Policy Manager Cloud for MacOS Client - -Getting Started & Installation - -Endpoint Policy Manager Cloud for MacOS may be used when the Mac is connected to Endpoint Policy -Manager Cloud service. - -The Endpoint Policy Manager Cloud for MacOS supports the following functions: - -- Connect to Endpoint Policy Manager Cloud, claim a Endpoint Policy Manager Cloud license and - download new Mac-specific policies -- Remove Local admin rights and overcome admin prompts -- Block / Allow USB and DMG files - -In this section you will learn the supported versions, how to install the client, command line -options, and tips for mass installation. - -## Supported Versions of the MacOS Client - -Supported versions of the MacOS client are: - -Mac OS 13 Ventura - -Mac OS 14 Sonoma diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/scenarios/_category_.json b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/scenarios/_category_.json deleted file mode 100644 index c7e22b2ad6..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/scenarios/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Supported Scenarios and Policy Types", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/scenarios/conditions.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/scenarios/conditions.md deleted file mode 100644 index b5f0e7e609..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/scenarios/conditions.md +++ /dev/null @@ -1,70 +0,0 @@ ---- -title: "Conditions" -description: "Conditions" -sidebar_position: 30 ---- - -# Conditions - -To make a match you need to match one or more Conditions: Path, Hash or Signature. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/mac/scenarios/conditions_1.webp) - -- Path – The name of the file and/or the location. This is the least secure method so use it with - caution. You may also provide a folder or folder recursively. -- Hash — This is bound to change from time to time, so use sparingly. -- Signature — Digitally signed items about the package which are difficult to forge. - -You can see the dialogs for Path, Hash and Signature condition here: - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/mac/scenarios/conditions_2.webp) - -To acquire the Path, you may use the Finder. - -![conditions_3](/images/endpointpolicymanager/mac/scenarios/conditions_3.webp) - -To acquirethe application's Hash or Signature, you can use the `ppfileinfo` tool: - -![A computer screen with white text - -Description automatically -generated](/images/endpointpolicymanager/mac/scenarios/conditions_4.webp) - -Actions: - -- Deny Execution — Deny installation of PKG files; -- Allow Execution —  Operates in accordance with the system configurations (Endpoint Policy Manager - client logs actions); -- Elevate — Gives the user elevated privileges for actions, e.g. can perform actions without admin - rights. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/mac/scenarios/conditions_5.webp) - -Additional Approve settings may be: - -- Not configured — Allow all users to perform the elevation / install if a rule match occurs. -- Credentials — Specify who can perform the elevation / install if a rule match occurrs - - - Any Administrator — Permit anyone will Admin credentials to perform the installation - - User — Specify specific users (non-Admin) which, with their own password, will perform the - elevation / installation. - -:::note -Users may be specified with wildcards, such as teacher\*, to allow all Teachers (Teacher1, -Teacher2, etc.) to perform the work. -::: - - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/mac/scenarios/conditions_6.webp) diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/scenarios/launchcontrol.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/scenarios/launchcontrol.md deleted file mode 100644 index 049150f73e..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/scenarios/launchcontrol.md +++ /dev/null @@ -1,59 +0,0 @@ ---- -title: "Application Launch Approval (aka Launch Control)" -description: "Application Launch Approval (aka Launch Control)" -sidebar_position: 50 ---- - -# Application Launch Approval (aka Launch Control) - -:::note -See the [Application Launch Approval](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/applicationlaunch.md) -video for an overview of this section. -::: - - -You might have an application which is part of your deployment, but you want to prevent it from -running. In this example Firefox is on the machine and runs as expected as a standard user. - -![Inserting image...](/images/endpointpolicymanager/mac/scenarios/application_launch_approval.webp) - -To block Firefox from running you can specify a condition. You may use the PPFILEINFO tool to get -the SigningID (or other attributes) for a match. - -![application_launch_approval_1](/images/endpointpolicymanager/mac/scenarios/application_launch_approval_1.webp) - -In this example we are using a Signing Identifier: `org.mozilla.firefox`. - -Then use that as your condition: - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/mac/scenarios/application_launch_approval_2.webp) - -The result of the policy is that the application will be blocked on launch. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/mac/scenarios/application_launch_approval_3.webp) - -Other actions besides Deny Execution are Allow Execution, with some options: - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/mac/scenarios/application_launch_approval_4.webp) - -- No Confirmation — Application launches -- Confirmation — Provides a pop-up asking user to confirm the actual launch -- Reason — User is asked to provide reason why this should be launched -- Challenge — Please see section “Using MacOS + Admin Approval” later in this document -- Credentials — User is forced to provide credentials to launch application - -Examples of the dialog boxes may be seen here: - -![Screens screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/mac/scenarios/application_launch_approval_5.webp) diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/scenarios/mountunmount.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/scenarios/mountunmount.md deleted file mode 100644 index dde9370d5c..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/scenarios/mountunmount.md +++ /dev/null @@ -1,63 +0,0 @@ ---- -title: "Mount / Unmount for USB and .DMG Files" -description: "Mount / Unmount for USB and .DMG Files" -sidebar_position: 60 ---- - -# Mount / Unmount for USB and .DMG Files - -:::note -See the -[Endpoint Privilege Manager for Mac: Mount / Unmount Part I](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/mountunmountpart1.md) -video and the -[Endpoint Privilege Manager for Mac: Mount / Unmount Part II](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/mountunmounpart2.md) -video for an overview of this section. -::: - - -You might want to manage when USB devices and/or .DMG disk files can be mounted (or unmounted). - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/mac/scenarios/mount_unmount_for_usb_and.webp) - -You can perform the following functions: - -Operations: - -- Mount — Operations for mounting USB devices and dmg files -- Unmount — Operations for unmounting/ejecting USB devices and dmg disk images -- Apply to any device — Automatically apply to all USB disk devices and DMG files - -Device Types: - -- USB — USB disk devices are supported -- DMG — DMG files are supported as mounted devices - -Action: - -- Deny Execution — Block the specified device type -- Allow Execution —Allow attachment of specified device type -- Elevate — Lets users perform operations with elevated privileges without entering an admin - password - -Targets: - -- Path — Path to DMG file to mount it -- Sources — Mount point defined by the system by USB device name or DMG file name - -For a simple demo, let's Block All USB and DMG devices. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/mac/scenarios/mount_unmount_for_usb_and_1.webp) - -The result of trying to attach a new device by USB can be seen here, as Endpoint Policy Manager has -blocked it. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/mac/scenarios/mount_unmount_for_usb_and_2.webp) diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/scenarios/overview.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/scenarios/overview.md deleted file mode 100644 index b3cb56cd1a..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/scenarios/overview.md +++ /dev/null @@ -1,22 +0,0 @@ ---- -title: "Supported Scenarios and Policy Types" -description: "Supported Scenarios and Policy Types" -sidebar_position: 20 ---- - -# Supported Scenarios and Policy Types - -Endpoint Policy Manager for Mac supports a variety of scenarios: - -- Package Installer Policy — Manage (install / block) packages -- System Settings Policy — Manage System Settings rights -- SUDO Policy — Perform command line functions -- Application Launch Approval Policy — Allow / Deny / Challenge application launch -- Mount/Unmount Policy — Allow/ Block USB devices and DMG files -- Finder Policy — Elevate application installs and uninstalls -- Privilege Elevation — Elevate applications which have helper applications - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/mac/scenarios/supported_scenarios_and_policy.webp) diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/scenarios/packageinstallation.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/scenarios/packageinstallation.md deleted file mode 100644 index 4ce9765ea4..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/scenarios/packageinstallation.md +++ /dev/null @@ -1,22 +0,0 @@ ---- -title: "Package Installation Policy" -description: "Package Installation Policy" -sidebar_position: 20 ---- - -# Package Installation Policy - -:::note -See the -[Endpoint Policy Manager Least Priv Manager for Macs Application Package Support](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/applicationpackage.md) -video for an overview of this section. -::: - - -When a standard user attempts to install a .PKG file they are not allowed to do so. In this example, -Skype for Business prompts the user for admin credentials before installing. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/mac/scenarios/package_installation_policy.webp) diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/scenarios/sudo.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/scenarios/sudo.md deleted file mode 100644 index dd0c4e8841..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/scenarios/sudo.md +++ /dev/null @@ -1,53 +0,0 @@ ---- -title: "SUDO" -description: "SUDO" -sidebar_position: 40 ---- - -# SUDO - -:::note -See the -[Endpoint Policy Manager Cloud and SUDO support](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/sudosupport.md) -video and the -[Endpoint Policy Manager Cloud Mac + SUDO Using Wildcard Example](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/macintegration/wildcards.md) -video for an overview of this section. -::: - - -The point of SUDO policies is to enable a standard user to perform SUDO commands without needing to -provide actual admin credentials. In this example the user wants to perform the command - -``` -Sudo mkdir /Users/Sudo/test1 but is blocked with a password request. -``` - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/mac/scenarios/sudo.webp) - -To overcome this, create a SUDO rule like this one: - -:![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/mac/scenarios/sudo_1.webp) - -The Actions are: - -- Deny Execution — Blocks the running of matching SUDO commands -- Allow Execution — Running SUDO commands is limited according to the system configuration. The - PolicyPak MacOS client logs the user's actions -- Elevate — SUDO commands run without administrator password request, applicable for admin and - standard users. - -For this example policy, choose **Elevate**. - -After the policy is synced, the result on the client can be seen here, where the same command now -runs without password requirement. - -![A screenshot of a computer - -Description automatically -generated](/images/endpointpolicymanager/mac/scenarios/sudo_2.webp) diff --git a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/pplpmimplementationguide.md b/docs/endpointpolicymanager/manuals/leastprivilegesecuri/pplpmimplementationguide.md deleted file mode 100644 index e46cb77e4c..0000000000 --- a/docs/endpointpolicymanager/manuals/leastprivilegesecuri/pplpmimplementationguide.md +++ /dev/null @@ -1,457 +0,0 @@ ---- -title: "Endpoint Privilege Manager Implementation QuickStart Guide" -description: "Endpoint Privilege Manager Implementation QuickStart Guide" -sidebar_position: 20 ---- - -# Endpoint Privilege Manager Implementation QuickStart Guide - -Netwrix Endpoint Policy Manager (formerly PolicyPak) Least Privilege Manager can help you remove -your local admin rights across your environment. And the tool has a lot to offer. In this Endpoint -Policy Manager Least Privilege Manager Implementation Quickstart guide we will give you a basic -action plan to get started, learn what applications and concerns you need to overcome, then generate -rules to overcome those concerns. - -You can use this guide if you’re planning to use Endpoint Policy Manager with On-Prem Active -Directory and GPOs (Group Policy Objects), an MDM service like Intune or with Endpoint Policy -Manager Cloud. - -:::note -Some customers will be starting from a point where many/most end-users are still running -with Local Admin Rights. But others customers have already removed Local Admin Rights and working to -overcome that scenario. This guide will work for either customer type. -::: - - -:::tip -Remember, as the phrase goes, “Rome wasn’t built in a day.” Your Endpoint Policy Manager Least -Privilege Manager project is expected to take a little bit of time to gather details, and be -implemented in a steady manner that everyone can live with, both end-users and the IT team. -::: - - -## Installing Endpoint Policy Manager MMC and Endpoint Policy Manager CSE - -Getting Endpoint Policy Manager up and going is done quickly. - -The Endpoint Policy Manager Portal is where you download Endpoint Policy Manager Bits and keys used -for when using Endpoint Policy Manager with On-Prem or MDM. You’ll even use the Endpoint Policy -Manager Portal a little for Endpoint Policy Manager Cloud because you’ll need those downloads to -make your perfect Endpoint Policy Manager Cloud test lab (explained later.) That URL is -Portal.endpointpolicymanager.com. - -:::note -Endpoint Policy Manager Cloud has its own URL, which is Cloud.endpointpolicymanager.com, and is -considered the Endpoint Policy Manager Cloud Service. Please see the -[Installation Quick Start](/docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/overviewinstall.md) for an overview of what -is in the download, how to download, unpack, and get organized and quick licensed. -::: - - -Here’s the Endpoint Policy Manager QuickStart Guide with specific steps and ideas for Endpoint -Policy Manager with On-Prem Active Directory and GPOs, an MDM service like Intune or with Endpoint -Policy Manager Cloud: -[Netwrix Endpoint Policy Manager Quick Start](/docs/endpointpolicymanager/manuals/introductionandquick/quickstart/overview.md) - -When done you will have the Endpoint Policy Manager MMC Console installed, your endpoints prepared -and be ready to go. - -![poc1](/images/endpointpolicymanager/leastprivilege/poc1.webp) - -:::note -If you’re confused about which method you want to use to get Endpoint Policy Manager -policies deployed (GPO, MDM or Cloud) this video can help you make an informed decision: -[Endpoint Policy ManagerSolution Methods: Group Policy, MDM, UEM Tools, and Endpoint Policy Manager Cloud compared.](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/gettingstartedmisc/solutionmethods.md) -::: - - -## Licensing some trial machines (or many machines) for Endpoint Privilege Manager and other Endpoint Policy Manager Components - -The Endpoint Policy Manager CSE on the endpoint only works when it is licensed. It is automatically -licensed when a license from Endpoint Policy Manager Cloud is issued. However, if you are using -Active Directory&GPOs or an MDM service like Intune, you will need to enable Endpoint Policy Manager -licensing on those machines. - -It’s easy to put one or a few machines into Trial mode with Endpoint Policy Manager without a -license. For more information on this, please see these steps: -[What is the fastest way to get started in an Endpoint Policy Manager trial, without running the License Request Tool?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingall/trial.md) - -If you need to request a license, please follow the steps outlined in this video: -[How to Request Licenses fromPolicyPak by Creating a "License Request Key"](https://helpcenter.netwrix.com/bundle/endpointpolicymanager/page/Content/endpointpolicymanager/Video/License/LicenseRequestKey.html) - -If you have a trial or full license for Endpoint Policy Manager and you wish to deploy it to all -your computers, please follow these steps: -[How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/installall/installuniversal.md) - -## (Optional, Recommended) Endpoint Policy Manager Cloud or Endpoint Policy Manager via MDM Test Lab Creation - -Working within Endpoint Policy Manager Cloud itself, you can generally create nearly all the policy -types you will need with the in-cloud editors. However, there will always be some policy-creation -areas that are only accessible using the MMC. - -As such we recommend that if you’re using Endpoint Policy Manager Cloud, that you create a -small-scale on-prem test lab. This will accelerate your rule creation because you won’t need to -create a rule and test in the cloud and then sync each time, which could be slower than creating -them first in a small-scale on-prem test lab and then uploading those policies to Endpoint Policy -Manager Cloud. - -Additionally, since there is no way to create policies for Endpoint Policy Manager within an MDM -service like Intune, having a small-scale on-prem test lab is required. - -For a video review on how to get organized and create a small-scale on-prem test lab to use in -conjunction with Endpoint Policy Manager Cloud or Endpoint Policy Manager alongside an MDM service -like Intune, see: -[Endpoint Policy Manager Cloud: What you need to get Started](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/testlabbestpractices/start.md) - -## (Optional, Recommended) Endpoint Policy Manager with an MDM service like Intune “Walk before you run.” - -If you’re using Endpoint Policy Manager with an MDM service like Intune, you will also need some -kind of management station and to pre-test your MDM license before you get going. - -The best place to start for these instructions is here: -[Video Learning Center](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/videolearningcenter.md) - -Additionally, get to know the details of how to create Endpoint Policy Manager Least Privilege -Manager XMLs, export them, and wrap them up into MSIs for deployment with any MDM service with this -video: [Using Least Privilege Manager with your MDM service](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/methods/mdm.md) - -## Endpoint Privilege Manager “Base Hits” / “Walk Before You Run” - -You’ll want to make sure Endpoint Policy Manager, and specifically Endpoint Policy ManagerLeast -Privilege Manager is licensed, working, and accepting rules. To verify that Endpoint Policy Manager -Least Privilege Manager is licensed and accepting rules, watch the video below and perform a -Endpoint Policy Manager Least Privilege Manager Control Panel Rule for “Device Manager.” Again, you -don’t need to perform the other steps in this video, you just want to verify that Device Manager can -be overcome when Endpoint Policy ManagerLeast Privilege Manager is engaged. Remember to test this -step as a proposed end-user who is running as a Standard User and doesn’t have Local Admin Rights. - -Video: [Kill Local Admin Rights (Run applications with Least Privilege)](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/localadminrights.md) - -## Setting up Common Scenarios Most Customers need right away - -If you are already running without Local Admin Rights, the top requests we get are to enable -customers to perform: - -- Printer installations -- Network Card Changes (DHCP vs. Static). -- Removing Installed Programs - -As such we have some Helper Tools for these specific scenarios and pre-configured guidance to get -them set up. - -![poc2](/images/endpointpolicymanager/leastprivilege/poc2.webp) - -For an overview, please see -[Overcome Network Card, Printer, and Remove Programs UAC prompts](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/helperstoolsandtips/uacprompts.md) -and watch all videos in that section. - -And because there’s an additional way to change Network Card Settings, you’ll want to also add an -extra rule which you can learn how to do here: [COM Support](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/comsupport.md) - -## (Optional, Recommended): Creating an “example machine” with applications you know you need to overcome and (Part 3B) using Endpoint Policy Manager recommended rules - -Of course, you have many machines out in the field where you want to remove local admin rights and -use rules to replace them. However, if you also have the applications, you already know you need -rules for, it is best to try these out in a test lab instead of relying on end-user machines and -auditing events (explained later.) - -So, on a test machineyou control, we recommend installing all the software you’d like to elevate and -work around UAC prompts. Install the Endpoint Policy Manager Client Side Extension on this machine. -Because Endpoint Policy Manager Least Privilege Manager doesn’t have any rules yet, the end-user -software won’t work as expected and should present UAC prompts. - -For more in formation on Endpoint Policy Manager Least Privilege Manager Pre-Configured rules, and -to to see how many you can use right away, without having to generate your own rules, please see -[Installing applications-and-Preconfigured-Rules](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/installapplications.md) - -![poc3](/images/endpointpolicymanager/leastprivilege/poc3.webp) - -For the remaining applications where Endpoint Policy Manager Least Privilege Manager doesn’t have -pre-configured rules, you’ll have to create your own rules. - -You need to get familiar with the Best Practices, so you don’t “over permission” your applications. -Therefore, as you go to create rules for your remaining applications on your test machine, please be -familiar with the following video content: - -- [Best Practices for Elevating User-Based Installs](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/elevatinguserbasedinstalls.md) -- [Security and Child Processes](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/securitychildprocesses.md) -- [Increase security by reducing rights on Open/Save dialogs](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/opensavedialogs.md) -- [Endpoint Privilege Manager and Wildcards](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/wildcards.md) - -The more rules you can create to overcome your UAC prompts in these test machined, the easier it -will be down the line, so users are only left with the UAC prompts you didn’t know about. - -## (Optional): Integration with Netwrix Privilege Secure - -If you are already a Netwrix Privilege Secure customer, you might want to also tie in Endpoint -Policy Manager to Netwrix Privilege Secure. If you wish to perform these steps, please refer to this -video: -[Netwrix Privilege Secure and the NPS/Endpoint Policy Manager Client](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/netwrixprivilegesecure/privilegesecureclient.md) - -## Turn on Global Auditing & Discovery to generate Interesting Events - -Now that you’ve got severalrules created, you should be down to only the items you don’t know about -on endpoint machines. You can turn on Auditing & Discovery to generate interesting events when users -run (or attempt to run) many applications with Local Admin Rights. The two items you should turn on -for starters are below. - -![poc4](/images/endpointpolicymanager/leastprivilege/poc4.webp) - -The way you do this is a little different from Group Policy vs. Endpoint Policy Manager Cloud. We -recommend getting familiar with Eventing in general, and then turning on Discovery. Additionally, -you can Auto-Create Policy from Global Audit Events once you’ve learned which applications require -elevation. For more information on this issue, please see: -[Events](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/events.md) - -Resulting events on endpoints look similar to an item like this: - -![poc5](/images/endpointpolicymanager/leastprivilege/poc5.webp) - -List of Endpoint Policy Manager Event Categories and IDs: - -- 6200 AUDIT - Process runs elevated. This event will show if the user has local admin rights -- 6205 AUDIT - Process requires elevation. This event will show if the User is a STANDARD USER (UAC - Prompt) -- 6206 A COM object requires elevation - This event will show if the User is a STANDARD USER (UAC - Prompt) -- 6207 An ActiveX installer requires elevation - This event will show if the User is a STANDARD USER - (UAC Prompt) - -## (Optional, Recommended): Capture and Forward Events from Endpoints - -If you are using Endpoint Policy Manager Cloud, this is enabled automatically for you. However, you -need to turn it on for each Cloud group. For more information on this issue, please see: -[Endpoint Policy Manager Cloud + PPLPM + Events: Collect Events in the Cloud](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/cloudevents.md) - -:::note -Endpoint Policy Manager Cloud Trailers and Customers get 24-hours of rolling logs stored. -You can talk with Endpoint Policy Manager Sales about how to increase the number of days stored in -Endpoint Policy Manager Cloud. -::: - - -If you are already a Netwrix Auditor Customer, you can forward interesting Endpoint Policy Manager -Least Privilege Manager events from endpoint computers to Netwrix Auditor so you can take action. -This is recommended if you already own Netwrix Auditor For more information on this, please see: -[How to use Netwrix Auditor to Report on Endpoint Policy Manager events](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/eventing/reports.md). - -An example of the kind of data you get back can be seen here. - -![poc12](/images/endpointpolicymanager/leastprivilege/poc12.webp) - -You may also use the in-box Windows Event System to forward interesting Endpoint Policy Manager -Least Privilege Manager events from endpoint computers to a central source. The steps to do this are -found here: -[How to forward interesting events for Least Privilege Manager (or anything else) to a centralized location using Windows Event Forwarding.](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/eventing/windowseventforwarding.md) - -You may also use Azure Log Analytics if you wish to store interesting Endpoint Policy Manager Least -Privilege Manager events from endpoints in Azure. For more information on this issue, please see: -[Windows 10 (and Server) Event Logs to Azure Log Analytics Walkthru](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/eventlogs.md). - -## Removing End-Users’ Local Admin Rights (if they still have them) - -At this point, this guide has provided advice if you have already removed local admin rights and if -your users are still running with Local Admin Rights. However, we often get the question of how to -perform this as a bulk task to remove Local Admin Rights from end-users. - -For information on how to perform this, please see -[Use Group Policy to remove local admin rights (then Endpoint Policy Manager to enable Least Privilege)](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/removelocaladmin.md). -While you can remove end-users local admin rights all at once, we recommend you proceed gradually. -This will avoid potential issues with an increase in requests for help as users may need access in -some situations. - -## Generating Rules from Auditing Events - -Once you have events generating on endpoints and you have access to those events (directly or via -Event Forwarding, Netwrix Auditor, or another source), you can auto-create rules from those events. - -![poc10](/images/endpointpolicymanager/leastprivilege/poc10.webp) - -For details on how to do this on-prem, please see -[Auto-Create Policy from Global Audit event](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/globalauditevent.md)[Auto-Create Policy from Global Audit event](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/globalauditevent.md) - -For details on how to do it with Endpoint Policy Manager Cloud, please see -[Endpoint Policy Manager Cloud + PPLPM + Events: Collect Events in the Cloud](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/cloudevents.md). -Note there is a new (not shown in the video) Generate Rule(s) button in Endpoint Policy Manager -Cloud. - -![poc11](/images/endpointpolicymanager/leastprivilege/poc11.webp) - -## Turn on Admin Approval - -You’ve already created the rules for the applications you know, and turned on Discovery Auditing for -the applications you don’t know. However, you can also enable end users to be proactive and request -one-time workarounds for UAC prompts without an automatic rule in place. - -![poc6](/images/endpointpolicymanager/leastprivilege/poc6.webp) - -For more in formation on the Endpoint Policy Manager Admin Approval feature, please see -[Admin Approval demo](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/demo.md) (all the videos in that -section). - -The goal is to minimize the times when users need one-off approval where you can implement automatic -rules from the details you gather. - -## Set up Company Branding - -Admin Approval and other Endpoint Policy Manager Least Privilege Manager dialogs that appear to -users can be branded with your company logo, colors, and text messages. - -![poc7](/images/endpointpolicymanager/leastprivilege/poc7.webp) - -For more information on branding, please see -[Branding the UI and Dialogs](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/branding.md). - -## (Optional): Turn on Self Elevate - -Use Endpoint Policy Manager Least Privilege Manager Self Elevate mode to overcome UAC prompts -without requiring specific rules. This is useful if you want to take away local admin rights, but -still give users the ability to "break the glass" if they have an emergency. - -![poc9](/images/endpointpolicymanager/leastprivilege/poc9.webp) - -This technique isn't generally recommended due to a potential lowering of your security posture, but -it can be especially useful in the right circumstances. - -For more information see:: - -- [Self Elevate Mode](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/demo.md) -- [Endpoint Privilege: Re-Authenticate with Self Elevate](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/reauthenticate.md) - -## (Optional) Turning on Endpoint Policy Manager SecureRun(TM) - -Endpoint Policy Manager Least Privilege Manager has built-in ransomware protection, blocking the -user from downloading, and then running applications you didn’t sanction. When SecureRun™ is on, -Endpoint Policy Manager Least Privilege Manager checks to see who owns the file executable, MSI -file, script, or Java JAR file. When users download files off the Internet or copy them from a USB -flash drive, they own the file, and since they aren't on the SecureRun™ Members list, Endpoint -Policy Manager Least Privilege Manager will block all applications that you (the admin on the -machine) didn’t install. - -![poc13](/images/endpointpolicymanager/leastprivilege/poc13.webp) - -However, if users were accustomed to downloading their applications, when Endpoint Policy Manager -SecureRun is enabled you could get an increase in helpdesk calls from users unable to run -applications they have installed. - -In a previous step, you removed your users from the Local Administrators group if they were -previously provided with full Local Admin Rights. But these unsanctioned, previously downloaded -applications will still run (Until Endpoint Policy Manager SecureRun is enabled.) - -Before you fully enable Endpoint Policy Manager SecureRun you can, once again, rely upon Global -Audit Settings to alert you for untrusted applications. These are the ones not owned by the -Computername\Administrator, the SYSTEM, TrustedInstaller, or other Administrators on the machine. - -Refer to the Global Auditing step to re-enable these settings to turn on Events for Untrusted and -optionally unsigned applications. - -![poc15](/images/endpointpolicymanager/leastprivilege/poc15.webp) - -Endpoint Policy Manager Least Privilege Manager Discovery Audit Policy Events Additional Notes - -- 6210 AUDIT- Process is untrusted and would have been blocked by SecureRun. Helps with discovering - user-based installs. - -- 6215 - Executable is unsigned and would have been blocked by SecureRun Helps with discovering - user-based installs. - -Then you can investigate those Event IDs that come in and create Allow and Log actions. To learn -more about how Endpoint Policy Manager Least Privilege Manager SecureRun helps you keep ransomware -and unknown applications at bay, but open up specific applications as needed with Allow and Log -actions, please see -[Using Least Privilege Manager's SecureRun Feature](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/feature.md) - -For general tips on how to use SecureRun™ please see -[How can I allow "Inline commands" blocked by SecureRun when a random path or filename is created each time?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/allowinlinecommands.md) - -## Final Thoughts - -This guide should give you the framework for getting your Endpoint Policy ManagerLeast Privilege -Manager implementation up and rolling with Endpoint Policy Manager. - -The next sections have three appendices with project rollout steps (referring to videos and -documentation we’ve mentioned here: one for Active Directory/Group Policy, one for Endpoint Policy -Manager Cloud, and one for Endpoint Policy Manager with an MDM service like Intune. - -If you need any help along the way, simply open a ticket at -[Netwrix Support](https://www.netwrix.com/tickets.html#netwrix-support) and we’ll be happy to give -you one-on-one attention to help you out. - -## Appendix A: Sample Endpoint Privilege Manager Project POC Plan for Endpoint Policy Manager with Active Directory / GPOs; removing local admin rights for 30 Developers - -Estimated Milestone Details and Target Dates - -| Milestone | Details & Tasks | | -| ----------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------- | -| M1 Pre-Requisites |
  • Verify you actually want to use Endpoint Policy Manager + Group Policy method and not some other method or some kind of hybrid approach: See [PolicyPak Solution Methods: Group Policy, MDM, UEM Tools, and PolicyPak Cloud compared](https://helpcenter.netwrix.com/bundle/endpointpolicymanager/page/Content/endpointpolicymanager/Video/GettingStarted/SolutionMethods.html).
  • Identify 3 friendly developers for this project.
  • Identify the remaining devices for POC, but focus on first three.
  • Download Endpoint Policy Manager from portal.endpointpolicymanager.com and get organized. See [Netwrix Endpoint Policy Manager Quick Start](/docs/endpointpolicymanager/manuals/introductionandquick/quickstart/overview.md) .
  • Get the Endpoint Policy Manager Quickstart Guide. See [Netwrix Endpoint Policy Manager Quick Start](/docs/endpointpolicymanager/manuals/introductionandquick/quickstart/overview.md) .
  • Get familiar with Endpoint Policy Manager + Group Policy Basics . See [Endpoint Policy Manager Explained: In about two minutes](/docs/endpointpolicymanager/knowledgebase/gettingstartedgrouppolicy/videolearningcenter/gettingstarted/explained.md)
  • On three developer machines perform the quick-licensing method via rename method. See [What is the fastest way to get started in an Endpoint Policy Manager trial, without running the License Request Tool?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingall/trial.md) or run licensing tool. After receiving your trial keys from sales, install your trial or full licenses for your on-prem Active Directory. See [How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/installall/installuniversal.md)
  • Install the Endpoint Policy Manager CSE on the three developer stations.
  • Move 3 developers into Active Directory OU named “Endpoint Policy Manager Test Devs” .
  • Verify Endpoint Policy Manager Least Privilege Manager is working with the “Device Manager” test. See [Kill Local Admin Rights (Run applications with Least Privilege)](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/localadminrights.md)
  • Create a Group Policy Object which turns on PPLPM Global Auditing. See [Use Discovery to know what rules to make as you transition from Local Admin rights](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/discovery.md) .
  • Identify KNOWN applications for Development stations which require Admin rights.
| Day 1
  • 3
| -| M2 Install PolicyPak CSE, common scenarios and known applications |
  • Install Endpoint Policy Manager CSE on the remaining 27 endpoints; ensure success (NO POLICIES, just the Endpoint Policy Manager moving parts)
  • (Optional) Set up Common Scenarios:
  • Printers, Remove Programs and IP Address changes. See [Overcome Network Card, Printer, and Remove Programs UAC prompts](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/helperstoolsandtips/uacprompts.md)
  • Second Method for Network Cards: [COM Support](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/comsupport.md)
  • Create rules for KNOWN applications which require ADMIN Rights.
  • [Best Practices for Elevating User-Based Installs](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/elevatinguserbasedinstalls.md)
  • [Security and Child Processes](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/securitychildprocesses.md)
  • [Increase security by reducing rights on Open/Save dialogs](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/opensavedialogs.md)
  • [Endpoint Privilege Manager and Wildcards](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/wildcards.md)
  • Use Endpoint Policy Manager Preconfigured rules when you can. See [Installing applications-and-Preconfigured-Rules](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/installapplications.md)
| Day 4 -6 | -| M3 Set up Event Forwarding |
  • Pick one (or choose another method, like Splunk, etc.) .
  • Event Forwarding with Netwrix Auditor. See [How to use Netwrix Auditor to Report on Endpoint Policy Manager events](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/eventing/reports.md)
  • Event Forwarding with Windows Eventing. See [How to forward interesting events for Least Privilege Manager (or anything else) to a centralized location using Windows Event Forwarding.](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/eventing/windowseventforwarding.md)
  • Event Forwarding with Azure Log Analytics. See [Windows 10 (and Server) Event Logs to Azure Log Analytics Walkthru](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/eventlogs.md)
| Day 7 -9 | -| M4 Begin Test |
  • Remove local admin rights for 3 developer endpoints. One suggested method / demo is here (there are other ways to perform this task): [Use Group Policy to remove local admin rights (then Endpoint Policy Manager to enable Least Privilege)](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/removelocaladmin.md)
  • Start to Generate Rules from Auditing Events. See [Auto-Create Policy from Global Audit event](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/globalauditevent.md).
  • Set up Admin Approval (Secret / policy). See [Auto-Create Policy from Global Audit event](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/globalauditevent.md) and [Admin Approval demo](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/demo.md)
  • Set up Endpoint Policy Manager Least Privilege Manager “Approvers” workflow (Identify APPROVER(s), get the AA tool up and going).
  • Optionally: Set up Endpoint Policy Manager Least Privilege Manager UI branding. See [Branding the UI and Dialogs](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/branding.md)
  • Deploy Admin Approval to existing systems.
  • Optional: Deploy Endpoint Policy Manager Least Privilege Manager Branding to existing systems.
  • Look at incoming EVENTS to determine the issues to make more rules.
| Day 10 | -| M5 Review Events |
  • Turn on Self Elevate for existing 3 developers.
  • Create documentation for Developers on how to interact with Endpoint Policy Manager Self Elevate method. ([Self Elevate Mode](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/demo.md)).
  • Review EVENTS to determine the issues to create rules.
| Day 11 | -| M6 Addition |
  • Add 7 more developer PCs to existing 3 and remove local admin rights using existing rules. (Don’t use Self elevate on new 7 endpoint, just the first three.)
| Day 12 | -| M7 Review Events |
  • Look at EVENTS to determine the issues to make more rules.
  • Investigate if SELF ELEVATE is being used or not by the 3 first developers (vs. Admin approval vs Direct Rules).
  • The is to get to as many direct rules as possible in the fastest amount of time.
| Day 13 | -| M8 Make Rules | Make more Direct rules from 10 endpoints | Day 14 | -| M9 Addition | Add +5 endpoints to Endpoint Policy Manager Active Directory OU and remove their local admin rights. | Day 15 | -| M10 Review Events | Look at EVENTS to determine the issues to make more direct rules. | Day 16 | -| M11 Addition | Add +5 endpoints Endpoint Policy Manager Active Directory OU and remove their local admin rights. | Day 17 | -| M12 Review Events | Look at EVENTS to determine the issues to make more direct rules. | Day 18 | -| M13 Addition | Add +5 endpoints to Endpoint Policy Manager Active Directory OU and remove their local admin rights. | Day 19 | -| M14 Review Events | Look at EVENTS to determine the issues to make more rules. | Day 20 | -| M15 Addition | Add +5 endpoints Endpoint Policy Manager Active Directory OU and remove their local admin rights. | Day 21 | -| M16 Review Events | Look at EVENTS to determine the issues to make more rules. | Day 22 | -| M17 Remaining | Add Remaining endpoints to Endpoint Policy Manager Active Directory OU and remove their local admin rights. | Day 23 | -| M18 SecureRun (Optional) | • Turn on Global Auditing for Untrusted and Unsigned applications. • Try turning on SecureRun for three developers.
  • [Using Least Privilege Manager's SecureRun Feature](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/feature.md)
  • [How can I allow "Inline commands" blocked by SecureRun when a random path or filename is created each time?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/allowinlinecommands.md)
| Day 24 | -| M19 SecureRun Rollout (Optional) | Add +5 endpoints per day and triage incoming SecureRun blocks with “Allow and Log” rules. Repeat each day with +5 endpoints. | Day 25+ | - - -## Appendix B: Sample Endpoint Privilege Manager Project POC Plan for Endpoint Policy Manager Cloud, removing local admin rights for 30 Developers. - -Estimated Milestone Details and Target Dates - -| Milestone | Details & Tasks | | -| ---------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------- | -| M1 Pre-Requisites |
  • Verify you actually want to use Endpoint Policy Manager + Cloud method and not some other method or some kind of hybrid approach. See [Endpoint Policy ManagerSolution Methods: Group Policy, MDM, UEM Tools, and Endpoint Policy Manager Cloud compared.](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/gettingstartedmisc/solutionmethods.md)
  • Identify 3 friendly developers for this project.
  • Identify the remaining devices for POC, but focus on first three.
  • Get familiar with Endpoint Policy Manager Cloud Basics. See [Endpoint Policy Manager Cloud: Two minute introduction](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/gettingstarted/introduction.md)
  • Download Endpoint Policy Manager bits from portal.endpointpolicymanager.com and Cloud MSI from cloud.endpointpolicymanager.com and get organized [Installation Quick Start](/docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/overviewinstall.md).
  • Get the Endpoint Policy Manager Quickstart Guide. See [Netwrix Endpoint Policy Manager Quick Start](/docs/endpointpolicymanager/manuals/introductionandquick/quickstart/overview.md)
  • Set up on prem test lab, even though we’re using Endpoint Policy Manager Cloud (Best Practice). See [Endpoint Policy Manager Cloud: What you need to get Started](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/testlabbestpractices/start.md).
  • Install Endpoint Policy Manager Cloud Client which automatically installs the Endpoint Policy Manager CSE on 3 devices.
  • Identify the remaining devices for POC, but focus on first three.
  • Move 3 Endpoint Policy Manager cloud joined devices to Endpoint Policy Manager Cloud Company “GROUP1”.
  • Verify Endpoint Policy Manager Least Privilege Manager is working with the “Device Manager” test. See [Kill Local Admin Rights (Run applications with Least Privilege)](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/localadminrights.md)
  • Turn on PPLPM Global Auditing for Cloud. See [Endpoint Policy Manager Cloud + PPLPM + Events: Collect Events in the Cloud](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/cloudevents.md)
  • Test to make sure PPC Events are seen in Endpoint Policy Manager Cloud.
  • Identify KNOWN applications for Development stations which require Admin rights.
| Day 1-3 | -| M2 Install PPC |
  • Install Endpoint Policy Manager CSE on the remaining 27 endpoints; ensure success. (NO POLICIES, just the Endpoint Policy Manager moving parts.).
  • (Optional) Set up Common Scenarios for Printers, Remove Programs and IP Address changes.
  • [Overcome Network Card, Printer, and Remove Programs UAC prompts](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/helperstoolsandtips/uacprompts.md)
  • [COM Support](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/comsupport.md)
  • Create rules for KNOWN applications which require ADMIN Rights.
  • [Best Practices for Elevating User-Based Installs](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/elevatinguserbasedinstalls.md)
  • [Security and Child Processes](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/securitychildprocesses.md)
  • [Increase security by reducing rights on Open/Save dialogs](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/opensavedialogs.md)
  • [Endpoint Privilege Manager and Wildcards](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/wildcards.md)
  • Use Endpoint Policy Manager Preconfigured rules when you can. See [Installing applications-and-Preconfigured-Rules](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/installapplications.md)
| Day 4-6 | -| M3 Begin Test |
  • Remove local admin rights for 3 developer endpoints. One suggested method / demo is here (there are other ways to perform this task): [Use Group Policy to remove local admin rights (then Endpoint Policy Manager to enable Least Privilege)](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/removelocaladmin.md)
  • Start to Generate Rules from Auditing Events [Auto-Create Policy from Global Audit event](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/globalauditevent.md)
  • Set up Admin Approval (Secret / policy): [Auto-Create Policy from Global Audit event](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/globalauditevent.md) and [Admin Approval demo](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/demo.md)
  • Set up Endpoint Policy Manager Least Privilege Manager “Approvers” workflow (Identify APPROVER(s), get the AA tool up and going.)
  • Optionally: Set up Endpoint Policy Manager Least Privilege Manager UI branding: [Branding the UI and Dialogs](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/branding.md)
  • Deploy Admin Approval to existing systems.
  • Optional: Deploy Endpoint Policy Manager Least Privilege Manager Branding to existing systems.
  • Look at incoming EVENTS in Endpoint Policy Manager Cloud to determine the issues to make more rules.
| Day 7-8 | -| M4 Review Events |
  • Turn on Self Elevate for existing 3 developers.
  • Create documentation for Developers on how to interact with Endpoint Policy Manager Self Elevate method. See [Self Elevate Mode](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/demo.md)
  • Review EVENTS to determine the issues to create rules.
| Day 9 | -| M5 Addition | Add 7 more developer PCs to existing 3 and remove local admin rights using existing rules. (Don’t use Self elevate on new 7 endpoint, just the first three). | Day 10 | -| M6 Review Events |
  • Look at EVENTS to determine the issues to make more rules.
  • Investigate if SELF ELEVATE is being used or not by the 3 first developers (vs. Admin approval vs Direct Rules.)
  • Goal is to get to as many direct rules as possible in the fastest amount of time.
| Day 11 | -| M7 Make Rules | Make more Direct rules from 10 endpoints. | Day 12 | -| M8 Addition | Add +5 endpoints to Endpoint Policy Manager Cloud and remove their local admin rights. | Day 13 | -| M9 Review Events | Look at EVENTS to determine the issues to make more direct rules. | Day 14 | -| M10 Addition | Add +5 endpoints to Endpoint Policy Manager Cloud and remove their local admin rights. | Day 15 | -| M11 Review Events | Look at EVENTS to determine the issues to make more direct rules. | Day 16 | -| M12 Addition | Add +5 endpoints to Endpoint Policy Manager Cloud and remove their local admin rights. | Day 17 | -| M13 Review Events | Look at EVENTS to determine the issues to make more rules. | Day 18 | -| M14 Addition | Add +5 endpoints to Endpoint Policy Manager Cloud and remove their local admin rights. | Day 19 | -| M15 Review Events | Look at EVENTS to determine the issues to make more rules. | Day 20 | -| M16 Remaining | Add Remaining endpoints to Endpoint Policy Manager Cloud and remove their local admin rights. | Day 21 | -| M17 SecureRun Setup |
  • Turn on Global Auditing for Untrusted and Unsigned applications.
  • Try turning on SecureRun for three developers.
  • [Using Least Privilege Manager's SecureRun Feature](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/feature.md)
  • [How can I allow "Inline commands" blocked by SecureRun when a random path or filename is created each time?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/allowinlinecommands.md)
| Day 22 | -| M18+ SecureRun Rollout | Add +5 endpoints per day and triage incoming SecureRun blocks with “Allow and Log” rules. Repeat each day with +5 endpoints. | Day 23+ | - - -## Appendix C: Sample Endpoint Privilege Manager Project POC Plan for Endpoint Policy Manager with an MDM service like Intune, removing local admin rights for 30 Developers. - -Estimated Milestone Details and Target Dates - -| Milestones | Details & Tasks | | -| ------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------- | -| M1 Pre-Requisites |
  • Verify you actually want to use Endpoint Policy Manager + Cloud method and not some other method or some kind of hybrid approach. See [Endpoint Policy ManagerSolution Methods: Group Policy, MDM, UEM Tools, and Endpoint Policy Manager Cloud compared.](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/gettingstartedmisc/solutionmethods.md)
  • Identify 3 friendly developers for this project.
  • Identify the remaining devices for POC, but focus on first three.
  • Download Endpoint Policy Manager bits from portal.endpointpolicymanager.com and Cloud MSI from cloud.endpointpolicymanager.com and get organized. See the [Installation Quick Start](/docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/overviewinstall.md).
  • Get the Endpoint Policy Manager Quickstart Guide. See [Netwrix Endpoint Policy Manager Quick Start](/docs/endpointpolicymanager/manuals/introductionandquick/quickstart/overview.md)
  • On ONE machine (any machine) perform the MDM “Walk before you run” test. See [Endpoint Policy Manager and MDM walk before you run](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/gettingstarted/testsample.md)
  • On three developer machines perform the quick-licensing method via rename (see[What is the fastest way to get started in an Endpoint Policy Manager trial, without running the License Request Tool?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/requestingall/trial.md) or run licensing tool and after receiving your trial keys from sales, install your trial or full licenses for your MDM licenses. See [How to install UNIVERSAL licenses for NEW Customers (via GPO, SCCM or MDM)](/docs/endpointpolicymanager/knowledgebase/licensing/videolearningcenter/installall/installuniversal.md)
  • Install the Endpoint Policy Manager CSE on the three developer stations.
  • Move 3 developers into an Azure/MDM group named “Endpoint Policy Manager Test Devs”.
  • Target deploy the Endpoint Policy Manager CSE to the group.
  • Get to understand Endpoint Policy Manager Least Privilege Manager + MDM Service (Exporting policies, then wrapping up XMLs into MSIs). See [Using Least Privilege Manager with your MDM service](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/methods/mdm.md)
  • Verify Endpoint Policy Manager Least Privilege Manager is working wit the “Device Manager” test. See [Kill Local Admin Rights (Run applications with Least Privilege)](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/localadminrights.md)
  • Create a policy which turns on PPLPM Global Auditing, export as XML and wrap up as MSI for deployment via MDM. See [Use Discovery to know what rules to make as you transition from Local Admin rights](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/discovery.md)
  • Identify KNOWN applications for Development stations which require Admin rights.
| Day 1-3 | -| M2 Install Endpoint Policy Manager CSE, common scenarios and known applications |
  • Install Endpoint Policy Manager CSE on the remaining 27 endpoints; ensure success. (NO POLICIES, just the PolicyPak moving parts).
  • (Optional) Set up Common Scenarios for Printers, Remove Programs and IP Address changes. See [Overcome Network Card, Printer, and Remove Programs UAC prompts](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/helperstoolsandtips/uacprompts.md) and [COM Support](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/comsupport.md)
  • Create rules for KNOWN applications which require ADMIN Rights.
  • [Best Practices for Elevating User-Based Installs](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/elevatinguserbasedinstalls.md)
  • [Security and Child Processes](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/securitychildprocesses.md)
  • [Increase security by reducing rights on Open/Save dialogs](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/opensavedialogs.md)
  • [Endpoint Privilege Manager and Wildcards](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/bestpractices/wildcards.md)
  • Use Endpoint Policy Manager Preconfigured rules when you can. See [Installing applications-and-Preconfigured-Rules](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/installapplications.md)
| Day 4-6 | -| M3 Set up Event Forwarding |
  • Pick one (or choose another method, like Splunk, etc.)
  • Event Forwarding with Netwrix Auditor. See [How to use Netwrix Auditor to Report on Endpoint Policy Manager events](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/eventing/reports.md)
  • Event Forwarding with Windows Eventing. See [How to forward interesting events for Least Privilege Manager (or anything else) to a centralized location using Windows Event Forwarding.](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/eventing/windowseventforwarding.md)
  • Event Forwarding with Azure Log Analytics (likely best scenario for MDM environments). See [Windows 10 (and Server) Event Logs to Azure Log Analytics Walkthru](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/tipstricksandfaqs/eventlogs.md)
| Day 7-9 | -| M4 Begin Test |
  • Remove local admin rights for 3 developer endpoints. One suggested method / demo is here (there are other ways to perform this task): [Use Group Policy to remove local admin rights (then Endpoint Policy Manager to enable Least Privilege)](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/removelocaladmin.md)
  • Start to Generate Rules from Auditing Events. See [Auto-Create Policy from Global Audit event](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/globalauditevent.md).
  • Set up Admin Approval (Secret / policy). See [Auto-Create Policy from Global Audit event](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/eventing/globalauditevent.md) and [Admin Approval demo](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/demo.md)
  • Optionally: Set up Endpoint Policy Manager Least Privilege Manager UI branding. See [Branding the UI and Dialogs](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/branding.md)
  • Deploy Admin Approval to existing systems.
  • Optional: Deploy Endpoint Policy Manager Least Privilege Manager Branding to existing systems.
  • Look at incoming EVENTS to determine the issues to make more rules.
| Day 10 | -| M5 Review Events |
  • Turn on Self Elevate for existing 3 developers.
  • Create documentation for Developers on how to interact with Endpoint Policy Manager Self Elevate method. See [Self Elevate Mode](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/adminapproval/demo.md)
  • Review EVENTS to determine the issues to create rules.
| Day 11 | -| M6 Addition | Add 7 more developer PCs to existing 3 and remove local admin rights using existing rules. (Don’t use Self elevate on new 7 endpoint, just the first three.) | Day 12 | -| M7 Review Events |
  • Look at EVENTS to determine the issues to make more rules.
  • Investigate if SELF ELVATE is being used or not by the 3 first developers (vs. Admin approval vs Direct Rules).
  • Goal is to get to as many direct rules as possible in the fastest amount of time.
| Day 13 | -| M8 Make Rules | Make more Direct rules from 10 endpoints. | Day 14 | -| M9 Addition | Add +5 endpoints to Endpoint Policy Manager group and remove their local admin rights. | Day 15 | -| M10 Review Events | Look at EVENTS to determine the issues to make more direct rules. | Day 16 | -| M11 Addition | Add +5 endpoints to Endpoint Policy Manager group and remove their local admin rights. | Day 17 | -| M12 Review Events | Look at EVENTS to determine the issues to make more direct rules. | Day 18 | -| M13 Addition | Add +5 endpoints to Endpoint Policy Manager group and remove their local admin rights. | Day 19 | -| M14 Review Events | Look at EVENTS to determine the issues to make more rules. | Day 20 | -| M15 Addition | Add +5 endpoints to Endpoint Policy Manager group and remove their local admin rights. | Day 21 | -| M16 Review Events | Look at EVENTS to determine the issues to make more rules. | Day 22 | -| M17 Remaining | Add Remaining endpoints to Endpoint Policy Manager group and remove their local admin rights. | Day 23 | -| M18 SecureRun Setup |
  • Turn on Global Auditing for Untrusted and Unsigned applications.
  • Try turning on SecureRun for three developers.
  • [Using Least Privilege Manager's SecureRun Feature](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/videolearningcenter/basicsandgettingstarted/feature.md)
  • [How can I allow "Inline commands" blocked by SecureRun when a random path or filename is created each time?](/docs/endpointpolicymanager/knowledgebase/leastprivilegemanager/knowledgebase/tipssecurerun/allowinlinecommands.md)
| Day 24 | -| M19 SecureRun Rollout | Add +5 endpoints per day and triage incoming SecureRun blocks with “Allow and Log” rules. Repeat each day with +5 endpoints. | Day 25+ | diff --git a/docs/endpointpolicymanager/manuals/manuals.md b/docs/endpointpolicymanager/manuals/manuals.md deleted file mode 100644 index b5065e1f70..0000000000 --- a/docs/endpointpolicymanager/manuals/manuals.md +++ /dev/null @@ -1,61 +0,0 @@ ---- -title: "Netwrix Endpoint Policy Manager (formerly PolicyPak) User Manuals" -description: "Netwrix Endpoint Policy Manager (formerly PolicyPak) User Manuals" -sidebar_position: 30 ---- - -# Netwrix Endpoint Policy Manager (formerly PolicyPak) User Manuals - -The following topics provide information on using Endpoint Policy Manager: - -- Introduction & Quick Start Manuals - - - [Introduction and Basic Concepts](/docs/endpointpolicymanager/manuals/introductionandquick/basicconcepts/basicconcepts.md) - - [Netwrix Endpoint Policy Manager Quick Start](/docs/endpointpolicymanager/manuals/introductionandquick/quickstart/overview.md) - - [Installation Quick Start](/docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/overviewinstall.md) - - [Endpoint Policy Manager Cloud Quick Start](/docs/endpointpolicymanager/manuals/introductionandquick/cloud/overview.md) - - [MDM & UEM Tools](/docs/endpointpolicymanager/manuals/introductionandquick/mdm/overview.md) - - [Upgrade Guidance](/docs/endpointpolicymanager/manuals/introductionandquick/upgrade/overview.md) - -- Least Privilege Security Pak - - - [Least Privilege Manager (Windows)](/docs/endpointpolicymanager/manuals/leastprivilegesecuri/leastprivilege/overview.md) - - [Endpoint Privilege Manager Implementation QuickStart Guide](/docs/endpointpolicymanager/manuals/leastprivilegesecuri/pplpmimplementationguide.md) - - [Endpoint Policy Manager Cloud for MacOS Client](/docs/endpointpolicymanager/manuals/leastprivilegesecuri/mac/overview.md) - -- Device Management Pak - - - [Device Manager](/docs/endpointpolicymanager/manuals/devicemanagementpak/devicemanager/overview.md) - -- Apps, Browsers, & Java Security Pak - - - [Application Settings Manager ](/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/applicationsettings/overview.md) - - [Browser Router](/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/browserrouter/overview.md) - - [Java Enterprise Rules Manager](/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/javaenterpriserules/overview.md) - - [Security Settings Manager](/docs/endpointpolicymanager/manuals/appsbrowsersandjavas/securitysettings/overview.md) - -- GPO Compliance Pak - - - [Group Policy Compliance Reporter](/docs/endpointpolicymanager/manuals/gpocompliancepak/grouppolicycomplianc/overview.md) - -- Windows 10 & 11 Management Pak - - - [File Associations Manager](/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/overview.md) - - [Feature Manager for Windows](/docs/endpointpolicymanager/manuals/windows10and11manage/feature/overview.md) - - [Start Screen & Taskbar Manager](/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/overview.md) - -- GPO Reduction and Transitions Pak - - - [Administrative Templates Manager](/docs/endpointpolicymanager/manuals/gporeductionandtrans/adminstrativetemplat/overview.md) - - [Preferences Manager](/docs/endpointpolicymanager/manuals/gporeductionandtrans/preferences/overview.md) - -- App Delivery & Patching Pak - - - [Remote Work Delivery Manager](/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/remoteworkdelivery/overview.md) - - [Software Package Manager](/docs/endpointpolicymanager/manuals/appdeliveryandpatchi/softwarepackage/overview.md) - -- Desktop Automation & Connectivity Pak - - - [Scripts & Triggers Manager](/docs/endpointpolicymanager/manuals/desktopautomationand/scriptstriggers/overview.md) - - [Remote Desktop Protocol Manager](/docs/endpointpolicymanager/manuals/desktopautomationand/remotedesktopprotoco/overview.md) - - [Endpoint Policy Manager Network Security Manager](/docs/endpointpolicymanager/manuals/desktopautomationand/networksecuritymanager.md) diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/_category_.json b/docs/endpointpolicymanager/manuals/windows10and11manage/_category_.json deleted file mode 100644 index 4d1ea719ba..0000000000 --- a/docs/endpointpolicymanager/manuals/windows10and11manage/_category_.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "label": "Windows 10 And 11 Management Pak", - "position": 60, - "collapsed": true, - "collapsible": true -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/feature/_category_.json b/docs/endpointpolicymanager/manuals/windows10and11manage/feature/_category_.json deleted file mode 100644 index 9dfddb11dd..0000000000 --- a/docs/endpointpolicymanager/manuals/windows10and11manage/feature/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Feature Manager for Windows", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/feature/addremove/_category_.json b/docs/endpointpolicymanager/manuals/windows10and11manage/feature/addremove/_category_.json deleted file mode 100644 index bd63c41141..0000000000 --- a/docs/endpointpolicymanager/manuals/windows10and11manage/feature/addremove/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Quick Start - Adding and Removing Features", - "position": 20, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/feature/advanced/_category_.json b/docs/endpointpolicymanager/manuals/windows10and11manage/feature/advanced/_category_.json deleted file mode 100644 index c3fed943e9..0000000000 --- a/docs/endpointpolicymanager/manuals/windows10and11manage/feature/advanced/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Advanced Manipulations of Policies and Collections", - "position": 30, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/feature/feature/_category_.json b/docs/endpointpolicymanager/manuals/windows10and11manage/feature/feature/_category_.json deleted file mode 100644 index 9f3d281f3b..0000000000 --- a/docs/endpointpolicymanager/manuals/windows10and11manage/feature/feature/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Troubleshooting", - "position": 60, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/feature/itemleveltargeting/_category_.json b/docs/endpointpolicymanager/manuals/windows10and11manage/feature/itemleveltargeting/_category_.json deleted file mode 100644 index 245bc0a1f0..0000000000 --- a/docs/endpointpolicymanager/manuals/windows10and11manage/feature/itemleveltargeting/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Using Item-Level Targeting with Collections and Policies", - "position": 50, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/feature/itemleveltargeting/exportcollections.md b/docs/endpointpolicymanager/manuals/windows10and11manage/feature/itemleveltargeting/exportcollections.md deleted file mode 100644 index e0e0a61502..0000000000 --- a/docs/endpointpolicymanager/manuals/windows10and11manage/feature/itemleveltargeting/exportcollections.md +++ /dev/null @@ -1,45 +0,0 @@ ---- -title: "Exporting Collections" -description: "Exporting Collections" -sidebar_position: 20 ---- - -# Exporting Collections - -In -[Using Item-Level Targeting with Collections and Policies](/docs/endpointpolicymanager/manuals/desktopautomationand/remotedesktopprotoco/itemleveltargeting/overview.md) -we explain how to use the Endpoint Policy Manager Exporter to wrap up any Endpoint Policy Manager -directives and deliver them using Microsoft Endpoint Manager (SCCM and Intune), KACE, your own MDM -service, or Endpoint Policy Manager Cloud. To export a policy for later use using Endpoint Policy -Manager Exporter or Endpoint Policy Manager Cloud, right-click the collection or the policy and -select Export to XML. This will enable you to save an XML file for later use. - -:::note -For a video demonstrating the use of Endpoint Policy Manager Feature Manager for Windows -with Endpoint Policy Manager MDM see -[https://www.endpointpolicymanager.com/video/endpointpolicymanager-feature-manager-for-windows-mdm.html](https://www.endpointpolicymanager.com/video/endpointpolicymanager-feature-manager-for-windows-mdm.html). -::: - - -Remember that Endpoint Policy Manager Feature Manager for Windows policies can be created and then -exported on the Computer side. For instance, below, you can see a setting being exported. You can -also do this for an entire collection (not shown). - -![using_item_level_targeting_5](/images/endpointpolicymanager/feature/itemleveltargeting/using_item_level_targeting_5.webp) - -:::note -For a video showing how to export policies and use Endpoint Policy Manager Exporter, watch -[https://www.endpointpolicymanager.com/video/deploying-endpointpolicymanager-directives-without-group-policy-endpointpolicymanager-exporter-utility.html](https://www.endpointpolicymanager.com/video/deploying-endpointpolicymanager-directives-without-group-policy-endpointpolicymanager-exporter-utility.html). -::: - - -:::note -Exported collections or policies maintain any Item-Level Targeting set within them. If -you've used items that represent Group Membership in Active Directory, then those items will only -function when the machine is domain-joined. -::: - - -For more information on how to use exported policies with Endpoint Policy Manager Cloud or Endpoint -Policy Manager MDM see -[Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/uemtools.md). diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/feature/overview.md b/docs/endpointpolicymanager/manuals/windows10and11manage/feature/overview.md deleted file mode 100644 index 2cc9441231..0000000000 --- a/docs/endpointpolicymanager/manuals/windows10and11manage/feature/overview.md +++ /dev/null @@ -1,131 +0,0 @@ ---- -title: "Feature Manager for Windows" -description: "Feature Manager for Windows" -sidebar_position: 20 ---- - -# Feature Manager for Windows - -:::note -Before reading this section, please ensure you have read -[Installation Quick Start](/docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/overviewinstall.md), which will help you -with the following: -::: - - -- Install the Admin MSI on your GPMC machine -- Install the CSE on a test Windows machine -- Set up a computer in Trial mode or Licensed mode -- Set up a common OU structure - -Optionally, if you don't want to use Group Policy, read the section on -[MDM & UEM Tools](/docs/endpointpolicymanager/manuals/introductionandquick/mdm/overview.md)[MDM & UEM Tools](/docs/endpointpolicymanager/manuals/introductionandquick/mdm/overview.md). - -Endpoint Policy Manager Feature Manager for Windows allows you to perform the following operations -on Windows 10 or Windows Server (2016 and later): - -- Add features to existing Windows machines -- Remove features from existing Windows machines -- Add optional features to existing Windows machines -- Remove optional features from existing Windows machines -- Limit which machines get policies via Item-Level Targeting -- Specify how to handle reboot requests when features need them - -:::note -Watch this video for an overview of Endpoint Policy Manager Feature Manager for Windows: -[https://www.endpointpolicymanager.com/video/endpointpolicymanager-feature-manager-for-windows.html](https://www.endpointpolicymanager.com/video/endpointpolicymanager-feature-manager-for-windows.html) -::: - - -Endpoint Policy Manager Feature Manager for Windows allows you to do the following: - -- Export the Endpoint Policy Manager Feature Manager for Windows rules and deliver them in one of - these four ways: - - - Microsoft Endpoint Manager (SCCM and Intune) - - Your own systems management software - - A mobile device management (MDM) service - - Endpoint Policy Manager Cloud service - -- Allow the client machine with the Endpoint Policy Manager client-side extension (CSE) to embrace - the directives and perform the work. - -:::note -If you use the Endpoint Policy Manager Cloud service, you can deliver Group Policy -settings even to non-domain-joined machines over the Internet. -::: - - -## Moving Parts - -- A management station: The Endpoint Policy Manager Admin Console MSI must be installed on the - management station where you create group policy objects (GPOs). Once it is installed, you'll see - the `PolicyPak | PolicyPak Feature Manager` for Windows node. -- The Endpoint Policy Manager CSE: This runs on the client (target) machine and is the same CSE for - all Endpoint Policy Manager products. There isn't anything separate to install, and the Endpoint - Policy Manager CSE must be present in order to accept Endpoint Policy Manager Feature Manager for - Windows directives via Group Policy, or when using Microsoft Endpoint Manager (SCCM and Intune), - KACE, MDM, or similar utilities. -- Endpoints: In order to use these, they must be licensed for Endpoint Policy Manager Feature - Manager for Windows using one of the licensing methods. -- Endpoint Policy Manager Exporter (optional): A free utility that lets you take Endpoint Policy - Manager Admin Templates Manager and our other products' XML files and wrap them into a portable - MSI file for deployment using Microsoft Endpoint Manager (SCCM and Intune), an MDM service, or - your own systems management software. - -## Ins and Outs - -Endpoint Policy Manager Feature Manager for Windows solves several important Windows 10 issues. Its -basic goal is to turn on and off Windows features and optional features. Many IT admins will preset -the features and optional features they want into their workstation and server images, only to find -out later they need to pull back from them, or add another feature or an optional feature. Once your -systems are deployed, it is very difficult to change your mind later and add features, languages, -or, starting with Windows 10 (build 1809), add tools from the Remote Server Admin Toolkit (RSAT). -Endpoint Policy Manager File Delivery Manager automates the process by allowing you to add or remove -whatever features or optional features you want with a few clicks. - -There is an in-box method of managing features and optional features on each machine, which requires -you to address each feature one by one. On any given machine, you can manage features and optional -features. - -![about_policypak_feature_manager](/images/endpointpolicymanager/feature/about_endpointpolicymanager_feature_manager.webp) - -There are two ways to manage features: with the Windows Features Control Pane, or the Windows -Settings page . These options can be accessed through the Start Menu. - -![about_policypak_feature_manager_1](/images/endpointpolicymanager/feature/about_endpointpolicymanager_feature_manager_1.webp) - -![about_policypak_feature_manager_2](/images/endpointpolicymanager/feature/about_endpointpolicymanager_feature_manager_2.webp) - -With optional features, you can add or subtract the feature you want. Below is an example of what -this looks like. - -![about_policypak_feature_manager_3](/images/endpointpolicymanager/feature/about_endpointpolicymanager_feature_manager_3.webp) - -An alternate way to perform similar functions is via the DISM command on the command line. For -example, to install the Hyper-V feature on a machine, you would use the DISM command. - -![about_policypak_feature_manager_4](/images/endpointpolicymanager/feature/about_endpointpolicymanager_feature_manager_4.webp) - -This process can be scripted, but the challenge is that the system will typically reboot when it -wants to, perhaps during a user's session. Additionally, scripts will typically run over and over -again, which is not great, and could cause undesired reboots. This is why Endpoint Policy Manager -Feature Manager for Windows eliminates the need to use scripts to add or remove features. Also, -Endpoint Policy Manager Feature Manager for Windows gives you time back, so you don't have to deal -with adding or removing features and optional features from the build process. So, instead of -presetting these into your image or just dealing with it later, Endpoint Policy Manager Feature -Manager for Windows enables you to manage these settings with policies. - -## Advantages of Using Feature Manager for Windows - -With Endpoint Policy Manager Feature Manager for Windows, the advantages you get are based upon the -policy method you already employ. - -- For those using Group Policy: - - - You can add or remove features for any number of computers (desktops or servers). - - You can use Item-Level Targeting to determine which computers should get which features. - -- For those using Endpoint Policy Manager Cloud and Endpoint Policy Manager MDM: Because your - machines might be roaming, you can use Endpoint Policy Manager to deliver a new policy to install - or uninstall a required feature. diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/_category_.json b/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/_category_.json deleted file mode 100644 index 1f63d727ac..0000000000 --- a/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "File Associations Manager", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/fileassociations/_category_.json b/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/fileassociations/_category_.json deleted file mode 100644 index 590917c135..0000000000 --- a/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/fileassociations/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Troubleshooting", - "position": 100, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/fileassociations/overview.md b/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/fileassociations/overview.md deleted file mode 100644 index 23789dd918..0000000000 --- a/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/fileassociations/overview.md +++ /dev/null @@ -1,19 +0,0 @@ ---- -title: "Troubleshooting" -description: "Troubleshooting" -sidebar_position: 100 ---- - -# Troubleshooting - -The most common problem users encounter with Netwrix Endpoint Policy Manager (formerly PolicyPak) -File Associations Manager occurs during initial use when trying to make associations. Here are some -tips when trying to troubleshoot Endpoint Policy Manager File Associations Manager: - -- Do not try to use Microsoft's method and Endpoint Policy Manager's method for managing file - associations on the same Windows 10 endpoints. Only one method will win. -- If deploying policies on the computer side, then Endpoint Policy Manager File Associations Manager - will attempt to map file associations if any user has the registered application you specify (not - only the logged-on user at the moment)>.This is a risk if the program exists at all on the - endpoint, but the user logging on at that moment (say on a Terminal Server/RDS machine) doesn't - have access to that application. diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/helperutility.md b/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/helperutility.md deleted file mode 100644 index ab0b8e2e3b..0000000000 --- a/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/helperutility.md +++ /dev/null @@ -1,59 +0,0 @@ ---- -title: "Using the Helper Utility" -description: "Using the Helper Utility" -sidebar_position: 90 ---- - -# Using the Helper Utility - -In the Netwrix Endpoint Policy Manager (formerly PolicyPak) File Associations Manager Quickstart -examples, we recommended that your management station have the same applications as your target -computers. However, that is not always practical. There are likely instances where you do not want -to install an application on your machine just for the sake of making a File Association. For -instance, someone in the Sales department may be the only one who has "Sales Application 123" -installed. - -That's where the Endpoint Policy Manager File Associations Manager Helper utility comes in. Run the -Endpoint Policy Manager File Associations Manager Helper on an example endpoint with the application -already installed and to which you want to make a policy association with later. - -:::note -For a video overview demonstrating how to use the Endpoint Policy Manager File -Associations Manager Helper utility, watch this video: -[Endpoint Policy Manager File Associations Manager: Helper Application](/docs/endpointpolicymanager/knowledgebase/fileassociationsmanager/videolearningcenter/tipsandtricks/helperapplication.md). -::: - - -The Endpoint Policy Manager File Associations Manager Helper is found in the Endpoint Policy Manager -ISO or ZIP download in the Endpoint Policy Manager Extras folder. - -![using_the_helper_utility](/images/endpointpolicymanager/fileassociations/using_the_helper_utility.webp) - -Follow these steps to setup the Endpoint Policy ManagerPolicyPak File Associations Manager Helper -utility: - -**Step 1 –** Launch the 11,000 kB EXE. When you do, the Endpoint Policy Manager File Associations -Manager Export wizard appears. - -![using_the_helper_utility_1](/images/endpointpolicymanager/fileassociations/using_the_helper_utility_1.webp) - -**Step 2 –** Find a particular file association that already exists on the machine, such as 3mf, and -the application it is already associated with. The application must be registered in order to see it -in the list. - -![using_the_helper_utility_2](/images/endpointpolicymanager/fileassociations/using_the_helper_utility_2.webp) - -**Step 3 –** Select **Include icons in the file (Can dramatically increase file size)**. This -setting is recommended even though the XML might be bigger. You must also choose to **Show file in -folder after finished** and **Open XML in Notepad when save is complete** for examination. - -![using_the_helper_utility_3](/images/endpointpolicymanager/fileassociations/using_the_helper_utility_3.webp) - -**Step 4 –** Take the exported file and import it into a Endpoint Policy Manager File Associations -Manager Group Policy Object (GPO). Note that the option to import from an XML is available when you -create a new entry and click **Select Program**. - -![using_the_helper_utility_4](/images/endpointpolicymanager/fileassociations/using_the_helper_utility_4.webp) - -To import the exported file into a Endpoint Policy Manager File Associations Manager GPO, pull up -the Select Program Association window, and then click on **From XML file** under Import. diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/insouts/_category_.json b/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/insouts/_category_.json deleted file mode 100644 index cd9b53d08f..0000000000 --- a/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/insouts/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Ins and Outs", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/itemleveltargeting/_category_.json b/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/itemleveltargeting/_category_.json deleted file mode 100644 index 5423db039b..0000000000 --- a/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/itemleveltargeting/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Using Item-Level Targeting with Collections and Policies", - "position": 70, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/overview.md b/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/overview.md deleted file mode 100644 index 0e5755ce3b..0000000000 --- a/docs/endpointpolicymanager/manuals/windows10and11manage/fileassociations/overview.md +++ /dev/null @@ -1,88 +0,0 @@ ---- -title: "File Associations Manager" -description: "File Associations Manager" -sidebar_position: 10 ---- - -# File Associations Manager - -:::warning -Even though Endpoint Policy Manager MDM and Endpoint Policy Manager Cloud can deliver a -wide variety of Endpoint Policy Manager and Group Policy settings to non-domain-joined machines, -neither the in-box Microsoft method, nor Endpoint Policy Manager File Associations Manager, can -configure machines unless the machine is domain-joined. -::: - - -This is a self-imposed limitation by Microsoft on this Windows 10 feature. - -## About File Associations Manager - -:::note -Before reading this section, please ensure you have read -[Installation Quick Start](/docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/overviewinstall.md), which will help you -learn to do the following: -::: - - -- Install the Admin MSI on your GPMC machine -- Install the CSE on a test Windows machine -- Set up a computer in Trial mode or Licensed mode -- Set up a common OU structure - -Optionally, if you don't want to use Group Policy, read the section on Advanced Concepts on Group -Policy and non–Group Policy methods (MEMCM, KACE, and MDM service or Netwrix Endpoint Policy Manager -(formerly PolicyPak) Cloud), located in the -[Endpoint Privilege Manager Implementation QuickStart Guide](/docs/endpointpolicymanager/manuals/leastprivilegesecuri/pplpmimplementationguide.md) -to deploy your directives. - -Endpoint Policy Manager File Associations Manager enables you to perform the following operations in -Windows 10: - -- Set up file associations for extensions such as .pdf with Acrobat Reader or FoxIT Pro Reader, or - .zip with WinZip or 7-Zip -- Set up protocol associations like MAILTO: or FTP: to specific applications -- Map an entire category of Windows 10 items -- Map a file extension to a Windows 10 "universal" application, such as Universal Windows Platform - (UWP)/Metro applications - -:::note -For an overview of Endpoint Policy Manager File Associations Manager, see -[https://www.endpointpolicymanager.com/products/endpointpolicymanager-file-associations-manager.html](https://www.endpointpolicymanager.com/products/endpointpolicymanager-file-associations-manager.html). -::: - - -The basic way to use Endpoint Policy Manager File Associations Manager is as follows: - -- Create rules to express which file extensions should launch which applications. -- Export the Endpoint Policy Manager File Associations Manager rules and deliver them using: - - - Microsoft Endpoint Manager (SCCM and Intune) or your own on-prem systems management software - - A mobile device management (MDM) service - - Endpoint Policy Manager Cloud service - -- Allow the client machine with the Endpoint Policy Manager client-side extension (CSE) to embrace - the directives and perform the work. - -:::note -If you use the Endpoint Policy Manager Cloud service, you can even deliver Group Policy -settings to non-domain-joined machines over the Internet. -::: - - -## Moving Parts - -- A management station: The Endpoint Policy Manager Admin Console MSI must be installed on the - management station where you create Group Policy Objects (GPOs). Once installed, you'll see the - Endpoint Policy Manager | Endpoint Policy Manager File Associations Manager node. -- The Endpoint Policy Manager CSE: This runs on the client (target) machine and is the same CSE for - all Endpoint Policy Manager products. There isn't anything separate to install, and the Endpoint - Policy Manager CSE must be present in order to accept Endpoint Policy Manager File Associations - Manager directives via Group Policy, or when using Microsoft Endpoint Manager (SCCM and Intune), - KACE, MDM, or similar utilities. -- Endpoints: In order to use these, they must be licensed for Endpoint Policy Manager File - Associations Manager using one of the licensing methods. -- The Endpoint Policy Manager Exporter (optional): A free utility that lets you take Endpoint Policy - Manager Admin Templates Manager and our other products' XML files and wrap them into a "portable" - MSI file for deployment using Microsoft Endpoint Manager (SCCM and Intune), an MDM service, or - your own systems management software. diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/_category_.json b/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/_category_.json deleted file mode 100644 index 389a32685e..0000000000 --- a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Start Screen & Taskbar Manager", - "position": 30, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/collectionssettingsi/_category_.json b/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/collectionssettingsi/_category_.json deleted file mode 100644 index 86265a3334..0000000000 --- a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/collectionssettingsi/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Collections, Policy Settings, and Item-Level Targeting", - "position": 50, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "collectionssettingsilt" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/collectionssettingsi/exportcollections.md b/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/collectionssettingsi/exportcollections.md deleted file mode 100644 index 0e219fb7d8..0000000000 --- a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/collectionssettingsi/exportcollections.md +++ /dev/null @@ -1,51 +0,0 @@ ---- -title: "Exporting Collections" -description: "Exporting Collections" -sidebar_position: 50 ---- - -# Exporting Collections - -Appendix A: [Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/uemtools.md) explains how -to use the Endpoint Policy Manager Exporter to wrap up any Endpoint Policy Manager directive and -deliver it using Microsoft Endpoint Manager (SCCM and Intune), KACE, your own MDM service, or -Endpoint Policy Manager Cloud. For Endpoint Policy Manager Cloud, you should automatically acquire a -license as seen in Figure 50. For Endpoint Policy Manager with an MDM service, the license should -come in your MSI license bundle. - -![collections_policy_settings_17](/images/endpointpolicymanager/startscreentaskbar/collections_policy_settings_17.webp) - -Figure 50. Endpoint Policy Manager Cloud customers are licensed for Endpoint Policy Manager Start -Screen & Taskbar Manager. - -:::note -For a video demonstrating the use of Endpoint Policy Manager Cloud with Endpoint Policy -Manager Start Screen & Taskbar Manager, see -[Endpoint Policy ManagerStart Screen & Taskbar Manager: Manage non-domain joined machines using Endpoint Policy Manager Cloud](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/methods/nondomainjoined.md). -::: - - -To export a policy for later use with Endpoint Policy Manager Exporter or Endpoint Policy Manager -Cloud, right-click the Start Screen Manager node, or a collection, and select "Export Collections as -XML," as demonstrated in Figure 51 and Figure 52. - -:::note -For a video of exporting Endpoint Policy Manager Start Screen & Taskbar Manager and using -Endpoint Policy Manager Exporter with an MDM service, watch -[Endpoint Policy Manager and MDM walk before you run](/docs/endpointpolicymanager/knowledgebase/gettingstartedmdm/videolearningcenter/gettingstarted/testsample.md). -::: - - -![collections_policy_settings_18](/images/endpointpolicymanager/startscreentaskbar/collections_policy_settings_18.webp) - -Figure 51. Exporting all collections for later use. - -![collections_policy_settings_19](/images/endpointpolicymanager/startscreentaskbar/collections_policy_settings_19.webp) - -Figure 52. Exporting the policy for later use. - -Note that exported collections or policies maintain any Item-Level Targeting set within them. If -you've used items that represent Group Membership in Active Directory, then those items will only -function when the machine is domain-joined. For more information about exporting settings and using -Endpoint Policy Manager Exporter utility, see Appendix A: -[Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/uemtools.md). diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/collectionssettingsi/startscreen/_category_.json b/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/collectionssettingsi/startscreen/_category_.json deleted file mode 100644 index 89f4a0d09d..0000000000 --- a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/collectionssettingsi/startscreen/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Start Screen Manager Settings", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/helperutility.md b/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/helperutility.md deleted file mode 100644 index 56e2213771..0000000000 --- a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/helperutility.md +++ /dev/null @@ -1,64 +0,0 @@ ---- -title: "Using the Helper Utility" -description: "Using the Helper Utility" -sidebar_position: 60 ---- - -# Using the Helper Utility - -In the Start Screen & Taskbar Manager Quickstart examples, we recommended that your management -station have the same applications as your target computers, but sometimes that is not practical. -For instance, someone in the Sales department may be the only one who has the "Sales Application -123" desktop application or "Mega Player" UWP installed. Or there could be other instances where you -don't want to install an application on your machine just for the sake of getting it into the Start -Screen or Taskbar. That's where the Start Screen & Taskbar Manager Helper utility comes in. You can -run the Start Screen & Taskbar Manager utility on an endpoint with the application already -installed; however, you should make sure it is one you want to associate a policy with later. - -:::note -For a video overview demonstrating the use of the Start Screen & Taskbar Manager Helper -utility, watch this video: -[Endpoint Policy Manager Start Screen and Taskbar Manager Helper Utility](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/gettingstarted/helperutility.md) -::: - - -The Start Screen & Taskbar Manager Helper utility is found in the Netwrix Endpoint Policy Manager -(formerly PolicyPak) ISO or ZIP download in the PolicyPak Extras folder, as seen in Figure 53. - -![using_the_helper_utility](/images/endpointpolicymanager/startscreentaskbar/using_the_helper_utility.webp) - -Figure 53. The Start Screen & Taskbar Manager Helper utility is located in the Extras folder. - -**Step 1 –** When you run the wizard you can choose whether to export registered (desktop) -applications or universal (UWP) applications, as shown in Figure 54. - -![using_the_helper_utility_1](/images/endpointpolicymanager/startscreentaskbar/using_the_helper_utility_1.webp) - -Figure 54. The PolicyPak Start Screen & Taskbar Manager Helper utility lets you export registered -and UWP applications. - -**Step 2 –** Then on the "Select registered programs" page, shown in Figure 55, you can leave the -default settings as they are and click "Next." - -![using_the_helper_utility_2](/images/endpointpolicymanager/startscreentaskbar/using_the_helper_utility_2.webp) - -Figure 55. The default settings to select all registered applications on the endpoint. - -**Step 3 –** Then on the next screen, shown in Figure 56, you can export the IDs for all the UWP -applications on a machine and click "Next." - -![using_the_helper_utility_3](/images/endpointpolicymanager/startscreentaskbar/using_the_helper_utility_3.webp) - -Figure 56. The defaults to select all UWP applications on the endpoint. - -**Step 4 –** Finally, you can export the XML to a file to be used on your management station/GPMC -machine. On your GPMC machine, as you're creating new PolicyPak Start Screen or PolicyPak Taskbar -Manager policies, you can then import from the XML file, as shown in Figure 57. - -![using_the_helper_utility_4](/images/endpointpolicymanager/startscreentaskbar/using_the_helper_utility_4.webp) - -Figure 57. On the management station you can import from the XML file. - -At this point, your list will change to what was imported from the XML file. This process means you -don't need to install the actual application on your machine to deliver Endpoint Policy Manager -Start Screen or Endpoint Policy Manager Taskbar Manager policies. diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/insouts/_category_.json b/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/insouts/_category_.json deleted file mode 100644 index cd9b53d08f..0000000000 --- a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/insouts/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Ins and Outs", - "position": 10, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/overview.md b/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/overview.md deleted file mode 100644 index 0ba2581d4c..0000000000 --- a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/overview.md +++ /dev/null @@ -1,77 +0,0 @@ ---- -title: "Start Screen & Taskbar Manager" -description: "Start Screen & Taskbar Manager" -sidebar_position: 30 ---- - -# Start Screen & Taskbar Manager - -:::note -Before reading this section, please ensure you have read -[Installation Quick Start](/docs/endpointpolicymanager/manuals/introductionandquick/overviewinstall/overviewinstall.md), which will help you -learn to do the following: -::: - - -- Install the Admin MSI on your GPMC machine -- Install the CSE on a test Windows machine -- Set up a computer in Trial mode or Licensed mode -- Set up a common OU structure - -Optionally, if you don't want to use Group Policy, read the section in Appendix A: Advanced Concepts -on Group Policy and non-Group Policy methods (MEMCM, KACE, and MDM service or Endpoint Policy -Manager Cloud) ([Using Endpoint Policy Manager with MDM and UEM Tools](/docs/endpointpolicymanager/manuals/introductionandquick/mdm/uemtools/uemtools.md)) to -deploy your directives. - -Netwrix Endpoint Policy Manager (formerly PolicyPak) Start Screen & Taskbar Manager enables you to -perform the following operations on Windows 10: - -- Place specific tiles for Desktop Edge and Universal Windows Platform (UWP) applications into your - own desired Start Menu groups -- Remove all existing Start Menu groups (created by users or default from Microsoft) -- Configure the Start Menu to enable users to create their own groups -- Pin applications to the Taskbar or remove user-pinned applications from the Taskbar - -:::note -For an overview of Endpoint Policy Manager Start Screen & Taskbar Manager, watch the -videos at -[https://www.endpointpolicymanager.com/products/endpointpolicymanager-start-screen-taskbar-manager.html](https://www.endpointpolicymanager.com/products/endpointpolicymanager-start-screen-taskbar-manager.html). -::: - - -The basic way to use Start Screen & Taskbar Manager is as follows: - -- Create rules to express which applications should appear in which Start Menu group -- Export the Start Screen & Taskbar Manager rules and deliver them using: - - - Microsoft Endpoint Manager (SCCM and Intune) - - Your own systems management software - - A mobile device management (MDM) service - - Endpoint Policy Manager Cloud service - -- Allow the client machine with the Endpoint Policy Manager client-side extension (CSE) to embrace - the directives and perform the work. - -:::note -If you use the Endpoint Policy Manager Cloud service, you can deliver Group Policy -settings even to non-domain-joined machines over the Internet. -::: - - -## Moving Parts - -- A management station. The Endpoint Policy Manager Admin Console MSI must be installed on your - management station where you create group policy objects (GPOs). Once it's installed, you'll see - the Endpoint Policy Manager | Start Screen Manager node and Endpoint Policy Manager | Taskbar - Manager node. -- The Endpoint Policy Manager CSE. This runs on the client (target) machine and is the same CSE for - all Endpoint Policy Manager products. There isn't anything separate to install, and the Endpoint - Policy Manager CSE must be present in order to accept Endpoint Policy Manager Start Screen & - Taskbar Manager directives via Group Policy, or when using Microsoft Endpoint Manager (SCCM and - Intune), KACE, MDM, or similar utilities. -- Endpoints. In order to use these, they must be licensed for Endpoint Policy Manager Start Screen & - Taskbar Manager using one of the licensing methods. -- Endpoint Policy Manager Exporter (optional). A free utility that lets you take Endpoint Policy - Manager Admin Templates Manager and our other products' XML files and wrap them into a "portable" - MSI file for deployment using Microsoft Endpoint Manager (SCCM and Intune), an MDM service, or - your own systems management software. diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/startscreen/_category_.json b/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/startscreen/_category_.json deleted file mode 100644 index 3f972afea4..0000000000 --- a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/startscreen/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Quick Start - Start Screen Manager", - "position": 30, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/startscreen/overview.md b/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/startscreen/overview.md deleted file mode 100644 index 8b03946769..0000000000 --- a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/startscreen/overview.md +++ /dev/null @@ -1,36 +0,0 @@ ---- -title: "Quick Start - Start Screen Manager" -description: "Quick Start - Start Screen Manager" -sidebar_position: 30 ---- - -# Quick Start - Start Screen Manager - -:::note -For some video overviews of Start Screen & Taskbar Manager, see Start Screen & Task Bar -Manager > [Video Learning Center](/docs/endpointpolicymanager/knowledgebase/startscreenandtaskbar/videolearningcenter/videolearningcenter.md). -::: - - -If you want to follow along with this Quickstart guide for Start Screen Manager, we suggest you -first download some applications on your Windows 10 management station and your endpoint. Start -Screen & Taskbar Manager is the best and quickest way to set up, test, and manage the Start Screen -and Taskbar from your machine (the Group Policy Editor machine) if you have the same applications as -the target machines. Therefore, we recommend you install Adobe Acrobat Reader twice—once on your -management station and once on your Window 10 endpoint. We suggest the offline MSI installer -package, which can be found at -[https://get.adobe.com/reader/enterprise/](https://get.adobe.com/reader/enterprise/). Make sure, for -the purposes of this Quickstart, you install the same version on your management station as on your -endpoint. - -You should be able to see Acrobat Reader in the Start Menu, as shown in Figure 5. - -![quickstart_start_screen_manager](/images/endpointpolicymanager/startscreentaskbar/startscreen/quickstart_start_screen_manager.webp) - -Figure 5. Adobe Reader is installed on the GPMC machine and the Windows 10 Endpoint. - -After Adobe Reader is installed, we can see that it is not automatically assigned to any group in -the Start Menu. Using Start Screen & Taskbar Manager, we want to place all of our newly installed -applications into a single group called "My Important Apps." In this Quickstart, we will create a -group policy object (GPO) and link it to your sample users. (You could also create and link a GPO to -your computers, but we will not be doing that in this Quickstart.) diff --git a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/startscreentaskbar/_category_.json b/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/startscreentaskbar/_category_.json deleted file mode 100644 index d17aafd894..0000000000 --- a/docs/endpointpolicymanager/manuals/windows10and11manage/startscreentaskbar/startscreentaskbar/_category_.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "label": "Troubleshooting", - "position": 70, - "collapsed": true, - "collapsible": true, - "link": { - "type": "doc", - "id": "overview" - } -} \ No newline at end of file diff --git a/docs/endpointpolicymanager/upgrademaintenance/_category_.json b/docs/endpointpolicymanager/upgrademaintenance/_category_.json new file mode 100644 index 0000000000..a6fb2f3494 --- /dev/null +++ b/docs/endpointpolicymanager/upgrademaintenance/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Upgrade & Maintenance", + "position": 25, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/upgrademaintenance/antivirussystemsoftware/_category_.json b/docs/endpointpolicymanager/upgrademaintenance/antivirussystemsoftware/_category_.json new file mode 100644 index 0000000000..8c98264c85 --- /dev/null +++ b/docs/endpointpolicymanager/upgrademaintenance/antivirussystemsoftware/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "AntiVirus And Other System Software", + "position": 40, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/antivirussystemsoftware/antivirus.md b/docs/endpointpolicymanager/upgrademaintenance/antivirussystemsoftware/antivirus.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/antivirussystemsoftware/antivirus.md rename to docs/endpointpolicymanager/upgrademaintenance/antivirussystemsoftware/antivirus.md diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/antivirussystemsoftware/citrixapplayering.md b/docs/endpointpolicymanager/upgrademaintenance/antivirussystemsoftware/citrixapplayering.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/antivirussystemsoftware/citrixapplayering.md rename to docs/endpointpolicymanager/upgrademaintenance/antivirussystemsoftware/citrixapplayering.md diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/antivirussystemsoftware/digitallysigneddriver.md b/docs/endpointpolicymanager/upgrademaintenance/antivirussystemsoftware/digitallysigneddriver.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/antivirussystemsoftware/digitallysigneddriver.md rename to docs/endpointpolicymanager/upgrademaintenance/antivirussystemsoftware/digitallysigneddriver.md diff --git a/docs/endpointpolicymanager/upgrademaintenance/antivirussystemsoftware/overview.md b/docs/endpointpolicymanager/upgrademaintenance/antivirussystemsoftware/overview.md new file mode 100644 index 0000000000..8afa247849 --- /dev/null +++ b/docs/endpointpolicymanager/upgrademaintenance/antivirussystemsoftware/overview.md @@ -0,0 +1,34 @@ +--- +title: "AntiVirus and System Software Overview" +description: "AntiVirus and System Software Overview" +sidebar_position: 1 +--- + +# AntiVirus and System Software Overview + +This section provides guidance for configuring third-party antivirus and system-level software to work properly with Netwrix Endpoint Policy Manager. + +## AntiVirus Configuration + +Learn how to properly configure antivirus software to avoid conflicts: + +- [AntiVirus Configuration Requirements](/docs/endpointpolicymanager/upgrademaintenance/antivirussystemsoftware/antivirus.md) - How to configure anti-virus or system-level software to work with Endpoint Policy Manager CSE + +## Virtualization and Layering + +Special considerations for virtualized environments: + +- [Citrix App Layering Integration](/docs/endpointpolicymanager/upgrademaintenance/antivirussystemsoftware/citrixapplayering.md) - Implementation with Citrix App Layering (formerly Unidesk) + +## Common Issues and Solutions + +Troubleshoot common problems related to third-party software interference: + +- [Digitally Signed Driver Prompts](/docs/endpointpolicymanager/upgrademaintenance/antivirussystemsoftware/digitallysigneddriver.md) - Why you're prompted about digitally signed drivers and workarounds +- [Service Start Privilege Issues](/docs/endpointpolicymanager/upgrademaintenance/antivirussystemsoftware/sufficientprivileges.md) - Troubleshooting "insufficient privileges to start system services" errors + +## Key Recommendations + +- Always configure antivirus software to exclude Endpoint Policy Manager files and processes +- Test thoroughly in virtualized environments before deployment +- Be aware that some security software may prevent proper CSE operation without proper configuration \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/antivirussystemsoftware/sufficientprivileges.md b/docs/endpointpolicymanager/upgrademaintenance/antivirussystemsoftware/sufficientprivileges.md similarity index 94% rename from docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/antivirussystemsoftware/sufficientprivileges.md rename to docs/endpointpolicymanager/upgrademaintenance/antivirussystemsoftware/sufficientprivileges.md index e4cf7c7439..fed07b9c06 100644 --- a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/antivirussystemsoftware/sufficientprivileges.md +++ b/docs/endpointpolicymanager/upgrademaintenance/antivirussystemsoftware/sufficientprivileges.md @@ -17,7 +17,7 @@ It's likely your Antivirus is preventing Endpoint Policy Manager from operating. Carbon Black will prevent Endpoint Policy Manager from running unless it's exempted. For more information -[How must I configure my Anti-virus or system-level software to work with Endpoint Policy Manager CSE?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/antivirussystemsoftware/antivirus.md). +[How must I configure my Anti-virus or system-level software to work with Endpoint Policy Manager CSE?](/docs/endpointpolicymanager/upgrademaintenance/antivirussystemsoftware/antivirus.md). Example of error and results in Event log: diff --git a/docs/endpointpolicymanager/upgrademaintenance/bestpractices/_category_.json b/docs/endpointpolicymanager/upgrademaintenance/bestpractices/_category_.json new file mode 100644 index 0000000000..9e134f991b --- /dev/null +++ b/docs/endpointpolicymanager/upgrademaintenance/bestpractices/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Best Practices Keeping Up To Date With Releases", + "position": 80, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/upgrademaintenance/bestpractices/commandline.md b/docs/endpointpolicymanager/upgrademaintenance/bestpractices/commandline.md new file mode 100644 index 0000000000..51e5390e48 --- /dev/null +++ b/docs/endpointpolicymanager/upgrademaintenance/bestpractices/commandline.md @@ -0,0 +1,62 @@ +--- +title: "How to trigger an update of the Endpoint Policy ManagerClient Side Extension and Cloud Client via command line using Endpoint Policy Manager Cloud versus Group Policy (OnPrem) Edition" +description: "How to trigger an update of the Endpoint Policy ManagerClient Side Extension and Cloud Client via command line using Endpoint Policy Manager Cloud versus Group Policy (OnPrem) Edition" +sidebar_position: 50 +--- + +# How to trigger an update of the Endpoint Policy ManagerClient Side Extension and Cloud Client via command line using Endpoint Policy Manager Cloud versus Group Policy (OnPrem) Edition + +## Using Endpoint Policy Manager Cloud + +From a CMD prompt, run `ppcloud /cseupdatenow` or`ppcloud /update` (both commands do the same thing) +Check for updated cloud client and client-side extensions and install them, if any are available. + +From more information seeRecommendations when using Netwrix Endpoint Policy Manager (formerly +PolicyPak) Cloud: Rings and Rollouts in the topic below. + +- [Using Rings to Test and Update the Endpoint Policy Manager Client-Side Extension and/or Cloud Client (And How to Stay Supported)](/docs/endpointpolicymanager/upgrademaintenance/bestpractices/rings.md) + +:::note +When using the commands above both the CSE and PPC client will be updated if new versions +are available. +::: + + +## Using Endpoint Policy Manager Group Policy (OnPrem) Edition + +From a CMD prompt run `ppupdate`followed by one of the switches in the examples provided below. + +:::note +These switches are dependent on having the CSE MSI files present in the Central Store See +Active Directory Options 2 & 3 in the KB below for more information. +::: + + +[Using Rings to Test and Update the Endpoint Policy Manager Client-Side Extension and/or Cloud Client (And How to Stay Supported)](/docs/endpointpolicymanager/upgrademaintenance/bestpractices/rings.md) + +Examples: + +``` +ppupdate /cseupdate +``` + +Forces CSE to immediately re-read `update.config` + +Check for updates will be performed on schedule. + +``` +ppupdate /cseupdatenow +``` + +Forces CSE to immediately re-read `update.config`, checks for updates and installs them if any are +available. + +Using this option will also reset the schedule. + +``` +ppupdate /cseupdatenow /force  +``` + +When specified along with /cseupdatenow, forces CSE to check for updates even when automatic updates +are disabled in `update.config`. This option is useful for those who want to check for updates on +their own schedule. diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/bestpractices/frequency.md b/docs/endpointpolicymanager/upgrademaintenance/bestpractices/frequency.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/bestpractices/frequency.md rename to docs/endpointpolicymanager/upgrademaintenance/bestpractices/frequency.md diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/bestpractices/frequency_1.md b/docs/endpointpolicymanager/upgrademaintenance/bestpractices/frequency_1.md similarity index 88% rename from docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/bestpractices/frequency_1.md rename to docs/endpointpolicymanager/upgrademaintenance/bestpractices/frequency_1.md index 6507162093..b6719e4b55 100644 --- a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/bestpractices/frequency_1.md +++ b/docs/endpointpolicymanager/upgrademaintenance/bestpractices/frequency_1.md @@ -7,13 +7,13 @@ sidebar_position: 40 # How often is Endpoint Policy Manager updated? And, must I update to the latest version? Are all versions supported? There are several parts to Netwrix Endpoint Policy Manager (formerly PolicyPak) -[What items and components are licensed, and what components are free?](/docs/endpointpolicymanager/knowledgebase/licensing/knowledgebase/miscquestions/components_1.md) +[What items and components are licensed, and what components are free?](/docs/endpointpolicymanager/licensing/knowledgebase/miscquestions/components_1.md) When people ask us how often Endpoint Policy Manager is updated, they usually want to know when Paks and/or the CSE are updated. The Paks are updated as needed. See -[AppSets: What is the official support policy for the pre-configured AppSets?](/docs/endpointpolicymanager/knowledgebase/applicationmanager/knowledgebase/preconfiguredappsets/supportpolicy.md) +[AppSets: What is the official support policy for the pre-configured AppSets?](/docs/endpointpolicymanager/components/applicationsettingsmanager/technotes/preconfiguredappsets/supportpolicy.md) The CSE is updated for emergency bug fixes right away. The CSE is updated for low-priority bug fixes about 3 to 4 times a year. We typically launch new features at the same time. diff --git a/docs/endpointpolicymanager/upgrademaintenance/bestpractices/overview.md b/docs/endpointpolicymanager/upgrademaintenance/bestpractices/overview.md new file mode 100644 index 0000000000..7f9843223a --- /dev/null +++ b/docs/endpointpolicymanager/upgrademaintenance/bestpractices/overview.md @@ -0,0 +1,26 @@ +--- +title: "Best Practices Overview" +description: "Best Practices Overview" +sidebar_position: 1 +--- + +# Best Practices Overview + +This section covers best practices for maintaining and updating your Netwrix Endpoint Policy Manager deployment. + +## Update Management + +Learn how to properly manage updates and stay supported: + +- [Using Rings to Test and Update](/docs/endpointpolicymanager/upgrademaintenance/bestpractices/rings.md) - Ring methodology for controlled rollouts and staying supported +- [Command Line Updates](/docs/endpointpolicymanager/upgrademaintenance/bestpractices/commandline.md) - Trigger CSE and Cloud Client updates via command line + +## Version Information + +Understand Endpoint Policy Manager versioning and update frequency: + +- [Build and Version Numbers](/docs/endpointpolicymanager/upgrademaintenance/bestpractices/versions.md) - Understanding Endpoint Policy Manager build and version numbers +- [Update Frequency Guidelines](/docs/endpointpolicymanager/upgrademaintenance/bestpractices/frequency.md) - When to upgrade or not upgrade the CSE +- [Update Frequency and Support](/docs/endpointpolicymanager/upgrademaintenance/bestpractices/frequency_1.md) - How often EPM is updated and version support policy + +These best practices will help ensure your Endpoint Policy Manager deployment remains stable, secure, and fully supported. \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/bestpractices/rings.md b/docs/endpointpolicymanager/upgrademaintenance/bestpractices/rings.md similarity index 97% rename from docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/bestpractices/rings.md rename to docs/endpointpolicymanager/upgrademaintenance/bestpractices/rings.md index fc66b98fe4..a95087bb84 100644 --- a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/bestpractices/rings.md +++ b/docs/endpointpolicymanager/upgrademaintenance/bestpractices/rings.md @@ -143,7 +143,7 @@ the latest CSE and/or Cloud Client to opt-in more groups. remaining PCs all at once (again, after you've done some pre-testing.) See the -[Endpoint Policy Manager Cloud Groups CSE and Cloud Client Small-Scale Testing and Updates](/docs/endpointpolicymanager/knowledgebase/gettingstartedcloud/videolearningcenter/upkeepanddailyuse/groups.md) topic +[Endpoint Policy Manager Cloud Groups CSE and Cloud Client Small-Scale Testing and Updates](/docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/groups.md) topic for additional information and a video on this process. ## Recommendations when using Endpoint Policy Manager with your Active Directory: Rings and Rollouts @@ -215,7 +215,7 @@ of the CSE Auto-Updater. The CSE Auto-Updater will honor one of two types of rin you will set your rings apart with number of hours between updates. See the -[How can I roll out the latest Endpoint Policy Manager CSE with Active Directory in a controlled manner using Rings ?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/updating/ringsupgrade.md) topic +[How can I roll out the latest Endpoint Policy Manager CSE with Active Directory in a controlled manner using Rings ?](/docs/endpointpolicymanager/installation/knowledgebase/updating/ringsupgrade.md) topic for additional information. ### Active Directory Option 3: Using the Built-in Endpoint Policy Manager CSE Update mechanism in an alternate manner. @@ -245,9 +245,9 @@ Manager Remote Work Delivery Manager. You could create the rings using Active D any other targeting, then, shoot down a CSE update to specific machines as you saw fit. See the -[How do I use Endpoint Policy Manager Remote Work Delivery Manager to update the Client Side Extension?](/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/knowledgebase/tipsandtricks/updateclientsideextension.md) +[How do I use Endpoint Policy Manager Remote Work Delivery Manager to update the Client Side Extension?](/docs/endpointpolicymanager/components/remoteworkdeliverymanager/technotes/tipsandtricks/updateclientsideextension.md) and -[Using Remote Work Delivery Manager to Update the Endpoint Policy Manager Client Side Extension](/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/tipsandtricks/updateclientsideextension.md) topics +[Using Remote Work Delivery Manager to Update the Endpoint Policy Manager Client Side Extension](/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/tipsandtricks/updateclientsideextension.md) topics for additional information. ## Recommendations when using Endpoint Policy Manager with your MDM: Rings and Rollouts diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/bestpractices/versions.md b/docs/endpointpolicymanager/upgrademaintenance/bestpractices/versions.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/bestpractices/versions.md rename to docs/endpointpolicymanager/upgrademaintenance/bestpractices/versions.md diff --git a/docs/endpointpolicymanager/upgrademaintenance/overview.md b/docs/endpointpolicymanager/upgrademaintenance/overview.md new file mode 100644 index 0000000000..901917e74d --- /dev/null +++ b/docs/endpointpolicymanager/upgrademaintenance/overview.md @@ -0,0 +1,41 @@ +--- +title: "Upgrade & Maintenance Overview" +description: "Upgrade & Maintenance Overview" +sidebar_position: 1 +--- + +# Upgrade & Maintenance Overview + +This section contains comprehensive guidance for upgrading and maintaining your Netwrix Endpoint Policy Manager (formerly PolicyPak) deployment. + +## Upgrade Guidance + +Learn about upgrade best practices, staying supported, and proper testing procedures: + +- [Upgrade Guidance](/docs/endpointpolicymanager/upgrademaintenance/upgrade/overview.md) - How to stay supported and upgrade recommendations +- [Upgrading Tips](/docs/endpointpolicymanager/upgrademaintenance/upgrade/tips.md) - Step-by-step upgrade process and ring methodology + +## Best Practices + +Keep up to date with releases and implement proper maintenance procedures: + +- [Using Rings to Test and Update](/docs/endpointpolicymanager/upgrademaintenance/bestpractices/rings.md) - Ring methodology for controlled rollouts +- [Build and Version Numbers](/docs/endpointpolicymanager/upgrademaintenance/bestpractices/versions.md) - Understanding version numbering +- [Update Frequency Guidelines](/docs/endpointpolicymanager/upgrademaintenance/bestpractices/frequency.md) - When to upgrade +- [Command Line Updates](/docs/endpointpolicymanager/upgrademaintenance/bestpractices/commandline.md) - Trigger updates via command line + +## Performance Questions + +Troubleshoot performance-related issues and optimize your deployment: + +- [Watcher Service Memory Usage](/docs/endpointpolicymanager/upgrademaintenance/performancequestions/watcherservicememoryusage.md) - Understanding multiple service instances +- [CPU Slowdown Verification](/docs/endpointpolicymanager/upgrademaintenance/performancequestions/cpuslowdown.md) - Diagnosing performance issues + +## AntiVirus and System Software + +Configure third-party software to work properly with Endpoint Policy Manager: + +- [AntiVirus Configuration](/docs/endpointpolicymanager/upgrademaintenance/antivirussystemsoftware/antivirus.md) - Configuring AV software +- [Citrix App Layering](/docs/endpointpolicymanager/upgrademaintenance/antivirussystemsoftware/citrixapplayering.md) - Implementation with Unidesk +- [Digitally Signed Driver](/docs/endpointpolicymanager/upgrademaintenance/antivirussystemsoftware/digitallysigneddriver.md) - Driver prompts and workarounds +- [Service Start Privileges](/docs/endpointpolicymanager/upgrademaintenance/antivirussystemsoftware/sufficientprivileges.md) - Troubleshooting service start issues \ No newline at end of file diff --git a/docs/endpointpolicymanager/upgrademaintenance/performancequestions/_category_.json b/docs/endpointpolicymanager/upgrademaintenance/performancequestions/_category_.json new file mode 100644 index 0000000000..0a21727f4b --- /dev/null +++ b/docs/endpointpolicymanager/upgrademaintenance/performancequestions/_category_.json @@ -0,0 +1,6 @@ +{ + "label": "Performance Related Questions", + "position": 50, + "collapsed": true, + "collapsible": true +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/performancequestions/cpuslowdown.md b/docs/endpointpolicymanager/upgrademaintenance/performancequestions/cpuslowdown.md similarity index 97% rename from docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/performancequestions/cpuslowdown.md rename to docs/endpointpolicymanager/upgrademaintenance/performancequestions/cpuslowdown.md index a55165aa1a..6892fb2d34 100644 --- a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/performancequestions/cpuslowdown.md +++ b/docs/endpointpolicymanager/upgrademaintenance/performancequestions/cpuslowdown.md @@ -90,7 +90,7 @@ Data Operations/sec is high at the same time. If you still think Endpoint Policy Manager is causing high disk usage / slowdowns we need: **Step 1 –** -[What must I send to Endpoint Policy Manager support in order to get the FASTEST support?](/docs/endpointpolicymanager/knowledgebase/gettingstarted/knowledgebase/troubleshooting/fastsupport.md) +[What must I send to Endpoint Policy Manager support in order to get the FASTEST support?](/docs/endpointpolicymanager/gettingstarted/misc/knowledgebase/troubleshooting/fastsupport.md) **Step 2 –** Screenshot of the perfmon as configured above running for a full minute. diff --git a/docs/endpointpolicymanager/upgrademaintenance/performancequestions/overview.md b/docs/endpointpolicymanager/upgrademaintenance/performancequestions/overview.md new file mode 100644 index 0000000000..a66f9655df --- /dev/null +++ b/docs/endpointpolicymanager/upgrademaintenance/performancequestions/overview.md @@ -0,0 +1,25 @@ +--- +title: "Performance Questions Overview" +description: "Performance Questions Overview" +sidebar_position: 1 +--- + +# Performance Questions Overview + +This section addresses common performance-related questions and troubleshooting scenarios for Netwrix Endpoint Policy Manager. + +## Service Performance + +Understand and troubleshoot service-related performance issues: + +- [Watcher Service Memory Usage](/docs/endpointpolicymanager/upgrademaintenance/performancequestions/watcherservicememoryusage.md) - Understanding multiple instances of ppWatcher service and memory usage verification + +## System Performance + +Diagnose and verify CSE performance impact on your systems: + +- [CPU and Disk Slowdown Verification](/docs/endpointpolicymanager/upgrademaintenance/performancequestions/cpuslowdown.md) - How to verify if Endpoint Policy Manager CSE is causing high CPU or disk slowdowns + +## Troubleshooting Tips + +These articles will help you identify whether performance issues are related to Endpoint Policy Manager and provide guidance on proper investigation methods to ensure optimal system performance. \ No newline at end of file diff --git a/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/performancequestions/watcherservicememoryusage.md b/docs/endpointpolicymanager/upgrademaintenance/performancequestions/watcherservicememoryusage.md similarity index 100% rename from docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/performancequestions/watcherservicememoryusage.md rename to docs/endpointpolicymanager/upgrademaintenance/performancequestions/watcherservicememoryusage.md diff --git a/docs/endpointpolicymanager/upgrademaintenance/upgrade/_category_.json b/docs/endpointpolicymanager/upgrademaintenance/upgrade/_category_.json new file mode 100644 index 0000000000..f3fd2490f7 --- /dev/null +++ b/docs/endpointpolicymanager/upgrademaintenance/upgrade/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Upgrade Guidance", + "position": 60, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/upgrademaintenance/upgrade/overview.md b/docs/endpointpolicymanager/upgrademaintenance/upgrade/overview.md new file mode 100644 index 0000000000..a81e6e7a79 --- /dev/null +++ b/docs/endpointpolicymanager/upgrademaintenance/upgrade/overview.md @@ -0,0 +1,56 @@ +--- +title: "Upgrade Guidance" +description: "Upgrade Guidance" +sidebar_position: 60 +--- + +# Upgrade Guidance + +How to Stay Supported + +Only the latest client-side extension (CSE) in the Portal or Netwrix Endpoint Policy Manager +(formerly PolicyPak) Cloud, the one with the most fixes and features, is fully supported. + +:::note +To better understand Endpoint Policy Manager build and version numbers, see the +[What are the Endpoint Policy Manager Build and Version numbers?](/docs/endpointpolicymanager/upgrademaintenance/bestpractices/versions.md) +topic for additional information. +::: + + +Just because you are unable to stay current (or nearly current) with the Endpoint Policy Manager CSE +rollouts, does not mean that you lose support. You are always supported, regardless of the CSE +version you have on your machine. However, if you find a bug, problem, inconsistency, or other +issue, then Endpoint Policy Manager support will direct you to update (at least) one machine with +the very latest CSE on it for investigation. We will also ask for log files from that machine after +you have reproduced the issue. In other words, as a general rule, we will typically not begin to +investigate your issue unless you can reproduce it on a machine with the latest CSE. There is no +value in investigating old CSE behavior because the problem could already be fixed in the latest +version, and logging improvements could be present in the latest CSEs. Additionally, if your request +involves us investigating the log files, similarly, we will not ask for nor investigate any log +files unless the problem is reproducible on the latest CSE. + +From a practical perspective, you should attempt to have your Windows 10 machines on a CSE that was +shipped at least within the last full year. Six months is better, and three months is even better. +Upgrades should go smoothly from any CSE to any other CSE, but those are not expressly tested. We +only test the previous CSE to current CSE upgrade path. Therefore, when you stay as close to our +currently shipping CSE as possible, you're likely going to get the best experience, latest testing, +and fewest problems overall.A best practice is to stay up to date on the latest version available. + +Furthermore, because corporate PCs are typically full of applications, system software, and possibly +other unusual circumstances, we strongly recommend you have at least one clean machine for ongoing +testing. A clean machine would have the following installed: + +- Latest version of Windows 10 +- Latest version of Microsoft Edge +- Latest version of Chrome or other browsers +- Onlysoftware that Endpoint Policy Manager might be controlling, such as that required with + Endpoint Policy Manager Application Settings Manager, Endpoint Policy Manager Least Privilege + Manager, Endpoint Policy Manager Start Screen & Taskbar Manager, etc. +- Not much else, and specifically, no third-party system software or A/V software other than + Endpoint Policy Manager. + +This way you can install the latest Endpoint Policy Manager CSE by hand and do some testing of a new +CSE before you attempt to roll it out to more client machines. Then, if you encounter a bug, you can +quickly validate your bug report and collect logs from a machine that is available whenever you need +it, not just when the user is available. \ No newline at end of file diff --git a/docs/endpointpolicymanager/upgrademaintenance/upgrade/rings/_category_.json b/docs/endpointpolicymanager/upgrademaintenance/upgrade/rings/_category_.json new file mode 100644 index 0000000000..e8ada68482 --- /dev/null +++ b/docs/endpointpolicymanager/upgrademaintenance/upgrade/rings/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Understanding Rings", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/upgrade/rings/activedirectory.md b/docs/endpointpolicymanager/upgrademaintenance/upgrade/rings/activedirectory.md similarity index 94% rename from docs/endpointpolicymanager/manuals/introductionandquick/upgrade/rings/activedirectory.md rename to docs/endpointpolicymanager/upgrademaintenance/upgrade/rings/activedirectory.md index c2df6d1889..51a6dd6e8a 100644 --- a/docs/endpointpolicymanager/manuals/introductionandquick/upgrade/rings/activedirectory.md +++ b/docs/endpointpolicymanager/upgrademaintenance/upgrade/rings/activedirectory.md @@ -77,7 +77,7 @@ Auto-Updater. The CSE Auto-Updater will honor one of two types of rings procedur you separate your rings by the number of hours between updates. See the -[How can I roll out the latest Endpoint Policy Manager CSE with Active Directory in a controlled manner using Rings ?](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/updating/ringsupgrade.md) topic +[How can I roll out the latest Endpoint Policy Manager CSE with Active Directory in a controlled manner using Rings ?](/docs/endpointpolicymanager/installation/knowledgebase/updating/ringsupgrade.md) topic for additional information. ## Endpoint Policy Manager CSE Auto-Updater in Reverse @@ -109,11 +109,11 @@ other targeting, and then sending a CSE update to specific machines as you see f :::note See the -[How do I use Endpoint Policy Manager Remote Work Delivery Manager to update the Client Side Extension?](/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/knowledgebase/tipsandtricks/updateclientsideextension.md) +[How do I use Endpoint Policy Manager Remote Work Delivery Manager to update the Client Side Extension?](/docs/endpointpolicymanager/components/remoteworkdeliverymanager/technotes/tipsandtricks/updateclientsideextension.md) topic for additional information. ::: See the -[Using Remote Work Delivery Manager to Update the Endpoint Policy Manager Client Side Extension](/docs/endpointpolicymanager/knowledgebase/remoteworkdelivery/videolearningcenter/tipsandtricks/updateclientsideextension.md)video for +[Using Remote Work Delivery Manager to Update the Endpoint Policy Manager Client Side Extension](/docs/endpointpolicymanager/components/remoteworkdeliverymanager/videos/tipsandtricks/updateclientsideextension.md)video for additional information. diff --git a/docs/endpointpolicymanager/upgrademaintenance/upgrade/rings/cloud.md b/docs/endpointpolicymanager/upgrademaintenance/upgrade/rings/cloud.md new file mode 100644 index 0000000000..dc8d294d24 --- /dev/null +++ b/docs/endpointpolicymanager/upgrademaintenance/upgrade/rings/cloud.md @@ -0,0 +1,40 @@ +--- +title: "Rings with Endpoint Policy Manager Cloud" +description: "Rings with Endpoint Policy Manager Cloud" +sidebar_position: 10 +--- + +# Rings with Endpoint Policy Manager Cloud + +In Endpoint Policy Manager Cloud, because the concept of groups is already used, you can consider a +Endpoint Policy Manager Cloud group like a ring. You can choose a group and manually specify to use +a particular version of the CSE on that group. You can also specify to use a particular version of +the CSE or Cloud Client everywhere (using the special "ALL" groups). Therefore, the following steps +are recommended: + +**Step 1 –** Set up a group of 2–5% of your computers. When a new CSE or Cloud Client is released, +you should opt in and use this group to start testing and verify success. If there is a problem, you +can raise it to the Endpoint Policy Manager support team and we will work with you. + +**Step 2 –** If all goes well, you can roll out the latest CSE and/or Cloud Client to more Endpoint +Policy Manager Cloud groups. It only takes one click within the group to select the CSE or Cloud +Client version. Your target rollout for the new CSE and/or Cloud Client should be around 30–50% of +your Windows machines. If an issues occurs, you can raise it to the support team and we willl work +with you. + +**Step 3 –** After you have rolled out to 50% of your machines, you should be confident enough to +roll it out to all machines. When ready, pick the remaining Endpoint Policy Manager Cloud groups and +select the latest CSE and/or Endpoint Policy Manager Cloud client to opt-in more groups. + +**Step 4 –** Alternatively, use the special **All** group to finish your upgrade and mass upgrade +the remaining PCs all at once (after completing some testing). + +See the +[Endpoint Policy Manager Cloud Groups CSE and Cloud Client Small-Scale Testing and Updates](/docs/endpointpolicymanager/deliverymethods/cloud/videos/upkeepanddailyuse/groups.md) +topic for additional information on this process. + +:::note +Update the CSE first or the Cloud Client first in the test groups and let each part of the +software update. Upgrading both at the same time is supported but is not recommended. + +::: diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/upgrade/rings/finalthoughts.md b/docs/endpointpolicymanager/upgrademaintenance/upgrade/rings/finalthoughts.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/upgrade/rings/finalthoughts.md rename to docs/endpointpolicymanager/upgrademaintenance/upgrade/rings/finalthoughts.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/upgrade/rings/mdm.md b/docs/endpointpolicymanager/upgrademaintenance/upgrade/rings/mdm.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/upgrade/rings/mdm.md rename to docs/endpointpolicymanager/upgrademaintenance/upgrade/rings/mdm.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/upgrade/rings/overview.md b/docs/endpointpolicymanager/upgrademaintenance/upgrade/rings/overview.md similarity index 100% rename from docs/endpointpolicymanager/manuals/introductionandquick/upgrade/rings/overview.md rename to docs/endpointpolicymanager/upgrademaintenance/upgrade/rings/overview.md diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/upgrade/settings.md b/docs/endpointpolicymanager/upgrademaintenance/upgrade/settings.md similarity index 93% rename from docs/endpointpolicymanager/manuals/introductionandquick/upgrade/settings.md rename to docs/endpointpolicymanager/upgrademaintenance/upgrade/settings.md index 163947833f..c67083e19e 100644 --- a/docs/endpointpolicymanager/manuals/introductionandquick/upgrade/settings.md +++ b/docs/endpointpolicymanager/upgrademaintenance/upgrade/settings.md @@ -11,7 +11,7 @@ Manager (formerly PolicyPak) the client-side extension (CSE) and tools are updat those specific parts in the following sections. For a video overview of this topic, see -[Keeping Application Settings Manager and Paks up to date](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/uptodate.md). +[Keeping Application Settings Manager and Paks up to date](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/uptodate.md). ## Updating the AppSets @@ -63,4 +63,4 @@ Endpoint Policy Manager GPOTouch. It is recommended to use the Endpoint Policy M utility to update each GPO automatically with the latest version of the AppSet DLL file. To see a video overview of how to manually touch a GPO, see -[GPOTouch Utility](/docs/endpointpolicymanager/knowledgebase/applicationmanager/videolearningcenter/centralstoresharing/touchutility.md). +[GPOTouch Utility](/docs/endpointpolicymanager/components/applicationsettingsmanager/videos/centralstoresharing/touchutility.md). diff --git a/docs/endpointpolicymanager/manuals/introductionandquick/upgrade/tips.md b/docs/endpointpolicymanager/upgrademaintenance/upgrade/tips.md similarity index 87% rename from docs/endpointpolicymanager/manuals/introductionandquick/upgrade/tips.md rename to docs/endpointpolicymanager/upgrademaintenance/upgrade/tips.md index 97e138d239..9c98f6db1d 100644 --- a/docs/endpointpolicymanager/manuals/introductionandquick/upgrade/tips.md +++ b/docs/endpointpolicymanager/upgrademaintenance/upgrade/tips.md @@ -31,7 +31,7 @@ You should familiarize yourself with the idea of rings, which is a Microsoft con controlled rollouts. Endpoint Policy Manager aligns with this ring philosophy and as such, getting familiar with those concepts is well advised. This idea is applicable for all delivery methods: Group Policy, MDM, SCCM, or Cloud. This manual will examine the concept of rings. See the -[Using Rings to Test and Update the Endpoint Policy Manager Client-Side Extension and/or Cloud Client (And How to Stay Supported)](/docs/endpointpolicymanager/knowledgebase/installation/knowledgebase/bestpractices/rings.md) topic +[Using Rings to Test and Update the Endpoint Policy Manager Client-Side Extension and/or Cloud Client (And How to Stay Supported)](/docs/endpointpolicymanager/upgrademaintenance/bestpractices/rings.md) topic for additional information In general, the best route to take for upgrading from any previous version is the following: @@ -48,7 +48,7 @@ distribute those to your admin team. Sometimes the latest helper tool must match the MMC editor. **Step 4 –** Update the Endpoint Policy Manager ADMX (troubleshooting) files. (Video tip: -[Troubleshooting with ADMX files](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/troubleshooting/admxfiles.md)) +[Troubleshooting with ADMX files](/docs/endpointpolicymanager/gettingstarted/misc/videos/troubleshooting/admxfiles.md)) **Step 5 –** Roll out the CSE in a controlled fashion to your endpoints using the ring methodology. @@ -67,9 +67,9 @@ If you're using Endpoint Policy Manager with Group Policy Objects (GPOs), you sh be making backups from time to time. Inside the GPMC, find the Group Policy Objects node, right-click, select Backup, and then follow the prompts. For additional information on how to preform a Group Policy backup, see the -[Endpoint Policy Manager: Backup and Restore Options to Recover from nearly any problem](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/upgradingmaintenance/backupoptions.md) +[Endpoint Policy Manager: Backup and Restore Options to Recover from nearly any problem](/docs/endpointpolicymanager/gettingstarted/misc/videos/upgradingmaintenance/backupoptions.md) and -[Endpoint Policy Manager Application Settings Manager: Backup, Restore, Export, Import](/docs/endpointpolicymanager/knowledgebase/gettingstarted/videolearningcenter/upgradingmaintenance/backup.md) +[Endpoint Policy Manager Application Settings Manager: Backup, Restore, Export, Import](/docs/endpointpolicymanager/gettingstarted/misc/videos/upgradingmaintenance/backup.md) video demos. ::: diff --git a/docusaurus.config.js b/docusaurus.config.js index f9785e7635..28bffce38c 100644 --- a/docusaurus.config.js +++ b/docusaurus.config.js @@ -56,23 +56,6 @@ const config = { defaultLocale: 'en', locales: ['en'], }, - scripts: [ - { - src: 'https://widget.kapa.ai/kapa-widget.bundle.js', - 'data-website-id': 'c8052612-e9cf-49f8-b7a4-e717c6adc398', - 'data-project-name': 'Netwrix', - 'data-project-color': '#F5F5F5', - 'data-project-logo': 'https://img.netwrix.com/elements/social_communities/netwrix_blog.svg', - 'data-user-analytics-cookie-enabled': 'true', - 'data-modal-title': 'Netwrix Docs AI Assistant', - 'data-modal-example-questions-title': 'Try asking me...', - 'data-modal-disclaimer': 'This **AI assistant answers Netwrix questions** using the documentation.', - 'data-modal-example-questions': - 'How to reduce Audit DB size?,How to scan for sensitive data?,How to migrate NEA to new server?,How to upload archive to SQL DB?', - 'data-button-text-color': '#E32C2D', - async: true, - }, - ], presets: [ [ 'classic',